Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/enuno/dokploy/dokploy-template-validationnpx skills add enuno/dokploy --skill dokploy-template-validationgit clone --depth 1 https://github.com/enuno/dokployWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00031 | $0.02266 |
| Opus 5 | $0.00015 | $0.01133 |
| Sonnet 5 | $0.00006 | $0.00453 |
| Haiku 4.5 | $0.00003 | $0.00227 |
Grade A, and why
dokploy-template-validation scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 391 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Dokploy Template Validation
When to Use This Skill
- As final step before completing a template
- When reviewing existing templates for issues
- When troubleshooting deployment problems
- When user asks to "validate" or "check" template
When NOT to Use This Skill
- During template creation (use other skills first)
- For application-level debugging
Prerequisites
- Complete docker-compose.yml
- Complete template.toml (if applicable)
- README.md (recommended)
Validation Checklist
1. Structure Validation
1.1 Required Sections
# docker-compose.yml must have:
services: # At least one service
volumes: # If any services use volumes
networks: # Must have app-net + dokploy-network
1.2 Network Structure
# REQUIRED: Two networks
networks:
${app}-net:
driver: bridge
dokploy-network:
external: true
Validation:
- Internal network exists with
driver: bridge -
dokploy-networkexists withexternal: true - Web services connect to both networks
- Database/cache services connect only to internal
2. Service Validation
2.1 Image Configuration
# CORRECT
image: postgres:16-alpine
# WRONG - fails validation
image: postgres:latest
image: postgres
image: myapp # No tag
Validation:
- All images have explicit version tags
- No
:latesttags - Using official/verified images where possible
2.2 Restart Policy
# REQUIRED
restart: always
Validation:
- All services have
restart: always
2.3 Health Checks
# REQUIRED for services with dependencies
healthcheck:
test: [...]
interval: 30s
timeout: 10s
retries: 3
start_period: 30s
Validation:
- All database services have health checks
- All app services have health checks
- Helper services can skip health checks
2.4 Dependencies
# CORRECT
depends_on:
postgres:
condition: service_healthy
# WRONG - no condition
depends_on:
- postgres
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 391 lines · 31 tokens per session scan A 5092ea3fa2ce
dokploy-template-validation is a skill published in the GitHub repository enuno/dokploy (2 stars, last pushed 22d ago), licensed Apache-2.0. It adds 31 tokens to every session and 2,266 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
cloud-run-basics
Manages Cloud Run services, jobs, and worker pools. Use when you need to deploy applications responding to HTTP requests (services), run event-triggered or scheduled tasks (jobs), or handle always-on pull-based background processing (worker pools).
openshell-cli
Guide agents through using the OpenShell CLI (openshell) for sandbox management, gateway registration, provider configuration and refresh, policy iteration, settings, service exposure, BYOC workflows, and inference routing. Covers basic through advanced multi-step workflows. Trigger keywords - openshell, sandbox…
cloud-k8s
Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.
kubernetes-specialist
Use when deploying or managing Kubernetes workloads. Invoke to create deployment manifests, configure pod security policies, set up service accounts, define network isolation rules, debug pod crashes, analyze resource limits, inspect container logs, or right-size workloads. Use for Helm charts, RBAC policies…
langbot-deploy
Deploy and configure a LangBot instance — Docker / Docker Compose, Kubernetes, the config.yaml model, the Box sandbox runtime, the plugin runtime, and the global API key. Use when installing, deploying, upgrading, or configuring LangBot in production or self-hosted environments. Triggers on "deploy langbot", "langbot…
doca-container-deployment
Use this skill when the user is hands-on deploying an in-bundle DOCA service container (Argus, DMS, Firefly, or UROM service) on a BlueField — kubelet standalone watching a static-pod manifests directory, YAML pod-spec drop, kubelet status / ENTRYPOINT logs / per-service liveness, smoke-before-bulk, and the layered…