Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/floomhq/moto/docker-deploynpx skills add floomhq/moto --skill docker-deploygit clone --depth 1 https://github.com/floomhq/motoWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00047 | $0.00619 |
| Opus 5 | $0.00023 | $0.00309 |
| Sonnet 5 | $0.00009 | $0.00124 |
| Haiku 4.5 | $0.00005 | $0.00062 |
Grade A, and why
docker-deploy scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -o /dev/null -w "%{http_code}" http://localhost:3000 How it starts
The opening of the file, as written. The whole thing — 96 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Docker Deploy Skill
Detect the target project, build, deploy, and verify. Never guess - confirm project from context or ask.
Projects
Example: Web App (Dev Server)
- Path:
~/my-app/ - Container:
my-app - Ports: 3000->3000
Build and deploy:
cd ~/my-app
docker build -t my-app:latest .
docker stop my-app 2>/dev/null || true
docker rm my-app 2>/dev/null || true
docker run -d --name my-app -p 3000:3000 my-app:latest
Verify:
curl -s -o /dev/null -w "%{http_code}" http://localhost:3000
Example: API Service (Remote Server)
- Source:
/path/to/api/main.py - Deploy path (remote):
/opt/my-api/ - Container:
my-api, port 8090
Deploy flow:
# 1. Copy updated file(s) to remote
scp /path/to/api/main.py remote-server:/opt/my-api/main.py
# 2. Rebuild and restart on remote
ssh remote-server "cd /opt/my-api && docker compose build && docker compose up -d"
Verify:
curl -s -o /dev/null -w "%{http_code}" https://api.example.com/health
Env vars: /opt/my-api/.env on remote (do not overwrite without reading first).
Example: Stateful Service (WhatsApp Gateway, DB, etc.)
- Container:
my-gateway, port 19000 - Config:
/opt/my-gateway/
CRITICAL: NEVER run docker-compose down or docker-compose up on stateful containers.
This destroys session state (e.g., WhatsApp linking, DB data).
Restart only:
docker restart my-gateway
Workflow
- Detect project from user input.
- If ambiguous, ask: "Which project?"
- Run the build/deploy sequence for that project.
- Run verification step and show the HTTP status code or container status.
- Report result. If verification fails, check container logs.
Check logs if something breaks:
# Local containers
docker logs --tail 50 <container-name>
# Remote containers
ssh remote-server "docker logs --tail 50 <container-name>"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 96 lines · 47 tokens per session scan A 4b4188ce4068
docker-deploy is a skill published in the GitHub repository floomhq/moto (32 stars, last pushed 2mo ago), licensed MIT. It adds 47 tokens to every session and 619 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
om-dev-container-maintenance
Maintain the VS Code Dev Container setup for Open Mercato. MUST use for ANY change to .devcontainer/ files. Also use when the container fails to build/start, services inside misbehave, or "works locally but not in dev container". Triggers on "dev container", "devcontainer", ".devcontainer".
memstack-deployment-docker-setup
Use this skill when the user says 'Docker', 'Dockerfile', 'docker-compose', 'containerize', 'docker-setup', or needs to containerize an application with optimized Docker images and compose configurations. Do NOT use for serverless or static site deployments.
ring:creating-helm-charts
Creating Helm charts to Lerian conventions via ring:helm: standardized chart structure, full env-var coverage from .env.example, security defaults (runAsNonRoot, readOnlyRootFilesystem), ClusterIP-only services, and health probes; validates helm lint and template render. Use when creating, modifying, or reviewing a…
huawei-cce
Use when creating or managing CCE Kubernetes clusters. Covers cluster creation, node pools, SWR registry, autoscaling. Triggers: CCE, Kubernetes, K8s, cluster, node pool, container, SWR. NOT for: serverless functions (use huawei-functiongraph), serverless containers (use huawei-cce for CCI redirect).
azure-aks-edge-essentials
Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when deploying AKS Edge/Hybrid with Arc, Azure Local…
azure-container-apps
Expert knowledge for Azure Container Apps development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building ACA apps with Entra/OIDC auth, KEDA/Dapr scaling, CI/CD…