CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

setup-ai-ide-devcontainer

Generate a .devcontainer (devcontainer.json plus Dockerfile) for AI-IDE development with AI CLI integration, skill mounting and security hardening. Use when the user wants to set up or containerize a local dev environment. Not for cloud deploys.

77

Quality

97%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

92%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong, highly executable skill body: an unambiguous 8-step workflow with explicit validation and destructive-overwrite safeguards, copy-paste-ready commands and exact identifiers throughout, and a clean one-level-deep reference structure. The only weakness is conciseness: several confirmation-rationale paragraphs restate the same anti-assumption argument multiple ways and could be consolidated.

Suggestions

Consolidate the repeated request-does-not-equal-confirmation rationale (Step 2's step-6 paragraph, Step 3's MANDATORY paragraph, and the Step 4 preamble bullets) into one canonical statement in a single place, then cross-reference it — the way the Auth Policy section already does with "Do not restate — point here".

Trim the multi-clause justification sentences (e.g., "What compliance produces is a user who saw what would be lost before it was lost") to the operative rule plus one short reason; the current form argues each point two to three times per paragraph.

Move the Codespaces caveat and the Lifecycle Hooks Reference narrative into an existing reference file (e.g., devcontainer-template.md), keeping only a one-line pointer in SKILL.md.

DimensionReasoningScore

Conciseness

The body is dense and assumes competence — exact image names, feature IDs with versions, mount strings, and compact tables with no concept explanations Claude already knows. However, the meta-rationale paragraphs in Step 2 ("A summary printed after the files exist is not this step — by then the decision it documents has already been made"), Step 3 ("What compliance produces is a user who saw what would be lost before it was lost"), and the Step 4 preamble each argue the same request-does-not-equal-confirmation point multiple ways and could be consolidated. Not a 3: padding is confined to a few guard-rail paragraphs and the bulk is maximally token-efficient; not a 5: those paragraphs are genuine over-explanation that could be trimmed to a single canonical statement.

4 / 5

Actionability

Fully executable throughout: exact base images per manifest ("mcr.microsoft.com/devcontainers/go" for go.mod), pinned feature IDs ("ghcr.io/devcontainers/features/common-utils:2", "ghcr.io/jsburckhardt/devcontainer-features/opencode:1"), copy-paste install commands ("curl -fsSL https://claude.ai/install.sh | bash"), exact mount strings ("source=${localWorkspaceFolderBasename}-claude-config,target=/home/<user>/.claude,type=volume"), a complete JSONC template, and runnable verification commands including "devcontainer up --workspace-folder .". Placeholders ("<base-image>") are necessarily per-project data, not gaps. Matches the score-5 anchor.

5 / 5

Workflow Clarity

Eight clearly sequenced steps (detect stack → discover features → detect existing config → determine capabilities → generate → write → verify → post-setup) with explicit validation: Step 7's structural, auth-policy, and end-to-end checklists; a diff-then-confirm-then-abort feedback loop guarding the destructive overwrite in Step 3 ("If the user declines — abort"); and error-recovery guidance (Step 1's multiple-manifest disambiguation, Step 3's update-vs-fix diagnosis). Matches the score-5 anchor with checkpoints and feedback loops.

5 / 5

Progressive Disclosure

The body is an overview plus workflow; detailed material is split into four real reference files (devcontainer-template.md, dockerfile-patterns.md, features-catalog.md, firewall-template.md), each clearly signaled at its point of use ("See [references/devcontainer-template.md](references/devcontainer-template.md)", including the pointer to its "§ setup-container.sh" loop to copy). References are one level deep — the only cross-reference in the bundle points back to SKILL.md — and all referenced sections exist. Matches the score-5 anchor.

5 / 5

Total

19

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An exemplary description: concrete artifacts and capabilities, explicit 'Use when' trigger with natural synonyms and file extensions, third-person voice, and a negative boundary clause. It distinguishes itself clearly from adjacent skills (cloud deploy, generic Docker setup). No changes needed.

DimensionReasoningScore

Specificity

"Generate a .devcontainer (devcontainer.json plus Dockerfile)" names concrete artifacts, and "AI CLI integration, skill mounting and security hardening" lists multiple specific capability areas — comprehensive, concrete coverage with no vague filler. Not a 4: there are no gaps in the artifact/action coverage relative to what the skill does; not below 5 since every named action is concrete rather than generic.

5 / 5

Completeness

Explicitly answers what ("Generate a .devcontainer (devcontainer.json plus Dockerfile) for AI-IDE development with AI CLI integration, skill mounting and security hardening") and when ("Use when the user wants to set up or containerize a local dev environment"), plus a negative boundary ("Not for cloud deploys"). Third-person voice throughout. Matches the score-5 anchor exactly; a 4 would require the 'when' to be less explicit, which it is not.

5 / 5

Trigger Term Quality

Natural user terms are comprehensively covered with synonyms and file extensions: "devcontainer", ".devcontainer", "devcontainer.json", "Dockerfile", "AI CLI", "set up", "containerize", "local dev environment". Not a 4: the description includes both the generic verbs a user would say ("set up", "containerize") and the exact file/path names they would mention, with no common variation missing.

5 / 5

Distinctiveness Conflict Risk

Clear niche (devcontainer generation for AI-IDE development) with distinct triggers (devcontainer, containerize, local dev environment) and an explicit exclusion ("Not for cloud deploys") that further separates it from deployment/containerization skills. Minimal conflict risk; matches the score-5 anchor.

5 / 5

Total

20

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

korchasa/flowai-plugins

Path

plugins/flowai/skills/setup-ai-ide-devcontainer/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.