Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/roedyrustam/vibes-plugnpx agentmods add skills/roedyrustam/vibes-plug/docker-container-expertWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/roedyrustam/vibes-plug/docker-container-expert)<a href="https://agentmods.dev/skills/roedyrustam/vibes-plug/docker-container-expert"><img src="https://agentmods.dev/badge/skills/roedyrustam/vibes-plug/docker-container-expert/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/roedyrustam/vibes-plug/docker-container-expert"><img src="https://agentmods.dev/badge/skills/roedyrustam/vibes-plug/docker-container-expert.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.02820 |
| Opus 5.5 | $0.00027 | $0.01128 |
| Sonnet 5.5 | $0.00014 | $0.00564 |
| Haiku 4.5 | $0.00007 | $0.00282 |
Grade A, and why
docker-container-expert scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 266 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Docker Container Expert (Production Standard 2026)
English
Orchestration & Integration
- Upstream & Lifecycle:
zero-to-prod-orchestrator(Phase 7 containerization),brainstorming,session-memory-manager. - CI/CD & Cloud Runtime:
ci-cd-devops-architect(K8s & deployment pipelines),github-actions-expert(BuildKit actions & registry push),cloud-hosting-expert(container runtime hosts). - Backend & Database Runtimes:
js-backend-expert(Node/Bun/Deno),python-programming-expert,go-programming-expert,rust-programming-expert,database-orm-expert(Postgres/Redis services). - Security & Hardening:
production-ready-hardener(distroless & nonroot audit),zero-trust-secret-vault(build secret mounts).
Description
Enterprise guide for building ultra-lean, hardened, and reproducible container images and orchestrating local and production workloads with Docker Engine 27+ and Docker Compose v2. Covers BuildKit cache mounts (--mount=type=cache), secret mounts (--mount=type=secret), multi-stage builds targeting Google Distroless or Alpine Linux, non-root execution (UID 65532), dropping Linux kernel capabilities (cap_drop: ALL), health checks (HEALTHCHECK), internal isolated bridge networks, compose dependency sequencing (condition: service_healthy), and multi-architecture builds via docker buildx.
Trigger Conditions
- Writing, refactoring, or optimizing
Dockerfilemanifests for Node.js, Python, Go, Rust, or Bun. - Structuring multi-container local and staging topologies with
compose.yaml. - Accelerating build speeds using Docker BuildKit cache mounts and layer ordering.
- Minimizing image attack surface: eliminating shell binaries, package managers, and root permissions.
- Hardening container security: dropping Linux capabilities, setting read-only filesystems, and enforcing memory/CPU limits.
- Configuring robust health checks and zero-downtime container lifecycle management.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +6 lines b16ef891606e
- 3d ago Changed 53679aeedb30
- 4d ago First seen · 260 lines · 68 tokens per session scan A c59dba9f2a92
docker-container-expert is a skill published in the GitHub repository roedyrustam/vibes-plug (113 stars, last pushed yesterday), licensed MIT. It adds 68 tokens to every session and 2,820 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-20.
Other skills, from other repositories
ai-engineering-toolkit
Overview of six AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval harness building, and product sense coaching.
ai-prompt-regression-testing
Use when comparing prompt changes against a fixed evaluation set: record actual model settings, required checks, missing results, judge limitations and case-level regression evidence.
agents-v2-py
Build container-based Foundry Agents with Azure AI Projects SDK (ImageBasedHostedAgentDefinition). Use when creating hosted agents with custom container images in Azure AI Foundry.
gear
Managing dependencies, CI/CD, advanced GitHub Actions workflows, containers, secrets, and operational config. Use for build, workflow, or environment work.
scaffold
Provisioning infrastructure via cloud IaC (Terraform/OpenTofu/CloudFormation/Pulumi) and local dev environments (Docker Compose, env vars). Use for IaC design or multi-cloud provisioning.
docker
Expert Docker containerization assistance covering multi-stage Dockerfiles, Docker Compose, layer caching, and container security. Use when containerizing applications, creating reproducible environments, or optimizing images.