CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

docker-expert

You are an advanced Docker containerization expert with comprehensive, practical knowledge of container optimization, security hardening, multi-stage builds, orchestration patterns, and production deployment strategies based on current industry best practices.

Quality

57%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/docker-expert/SKILL.md

The canonical home for this skill is docker-expert in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

63%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable and well-structured, with executable code patterns, checklists, and a validation-backed invocation workflow. Its weaknesses are verbosity from duplicated referral sections and persona restatements, a monolithic single-file layout with no progressive disclosure, and a couple of incomplete code snippets.

Suggestions

Split the Code Review Checklist, the full Compose orchestration patterns, and the Common Issue Diagnostics tables into separate reference files (e.g. references/checklists.md, references/compose-patterns.md) and link them from a leaner SKILL.md overview.

Remove the duplicated step-0 referral list (kept verbatim in 'Integration & Handoff Guidelines') and the filler 'When to Use' and closing persona paragraphs, which restate the description without adding guidance.

Fix the incomplete BuildKit secrets example so it is executable, and add explicit error-recovery guidance after the validation step (what to do when the build, runtime, or Compose validation fails).

DimensionReasoningScore

Conciseness

The bulk is dense, executable Dockerfile/Compose/bash code and useful checklists, but padded sections remain: the step-0 referral list is duplicated verbatim in 'Integration & Handoff Guidelines', the closing 'When to Use' section is pure filler ('This skill is applicable to execute the workflow or actions described in the overview'), opening/closing paragraphs restate the persona, and much of the material re-teaches standard Docker patterns Claude already knows.

3 / 5

Actionability

Mostly executable guidance: complete multi-stage Dockerfile, hardened-user, Compose, buildx, and cache-mount examples plus concrete validation commands. Minor gaps: the BuildKit secrets snippet is syntactically incomplete ('RUN --mount=type=secret,id=api_key API_KEY=$(cat ...) && \' trailing into a comment) and 'docker-compose config' assumes default file discovery, keeping it below fully copy-paste ready.

4 / 5

Workflow Clarity

A clear numbered invocation sequence (steps 0–4) with environment detection, escalation guidance for out-of-scope work, and an explicit validation step covering build, runtime, and Compose config. Steps 2–3 ('Identify the specific problem category', 'Apply the appropriate solution strategy from my expertise') are vague, and there is no explicit fix-and-retry loop after validation failures, so it falls short of anchor 5.

4 / 5

Progressive Disclosure

The ~400-line body has good internal section headers, but everything is inlined in a single monolithic SKILL.md with no bundle files at all; content that clearly belongs in separate references (the full review checklists, complete Compose patterns, diagnostics tables) is inline, matching 'some structure but could be better organized; content that should be separate is inline.'

3 / 5

Total

14

/

20

Passed

Description

35%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is a second-person persona statement rather than an action-oriented third-person skill description. It identifies the Docker domain clearly but lists no concrete actions, includes no 'Use when...' trigger guidance, and omits the most natural trigger terms (Dockerfile, docker compose, image size).

Suggestions

Rewrite in third person leading with concrete actions, e.g. "Optimizes Dockerfiles with multi-stage builds, hardens container security (non-root users, secrets management), and configures Docker Compose for production deployment."

Append an explicit trigger clause such as "Use when the user mentions Docker, Dockerfiles, docker compose, container images, or container optimization and security."

Include natural synonyms and concrete nouns users would say — Dockerfile, docker-compose, image size, .dockerignore — instead of abstract phrases like "orchestration patterns" and "industry best practices".

DimensionReasoningScore

Specificity

The description names the Docker domain and subdomains but describes a persona ("You are an advanced Docker containerization expert with comprehensive, practical knowledge of...") rather than any concrete actions the skill performs, fitting the 'names the domain but actions are minimal or generic' anchor; the rubric's second-person penalty ("You are...") reduces the base score of 2 by 1.

1 / 5

Completeness

The 'what' is vague (a persona with knowledge areas rather than skill actions) and there is no 'when', 'Use when...', or equivalent trigger guidance anywhere in the description, matching the 'vague what and no when' anchor; the missing-trigger cap of 3 is not binding since it scores below it.

2 / 5

Trigger Term Quality

Relevant natural keywords like "Docker", "containerization", "container optimization", "multi-stage builds", and "security hardening" are present, but the concrete phrases users actually say — "Dockerfile", "docker compose", "image size", ".dockerignore" — are missing, so it is above anchor 2 but short of good coverage.

3 / 5

Distinctiveness Conflict Risk

The description occupies a clear Docker niche with mostly distinct triggers, but "orchestration patterns, and production deployment strategies" overlaps with the closely related kubernetes-expert and devops-expert skills that the body itself defers to, preventing a 5.

4 / 5

Total

10

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills/skills/docker-expert/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.