Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Xakki/ai-agents-skills --skill new-project-dockergit clone --depth 1 https://github.com/Xakki/ai-agents-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xakki/ai-agents-skills/new-project-docker)<a href="https://agentmods.dev/skills/xakki/ai-agents-skills/new-project-docker"><img src="https://agentmods.dev/badge/skills/xakki/ai-agents-skills/new-project-docker/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xakki/ai-agents-skills/new-project-docker"><img src="https://agentmods.dev/badge/skills/xakki/ai-agents-skills/new-project-docker.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00050 | $0.00741 |
| Opus 5 | $0.00025 | $0.00370 |
| Sonnet 5 | $0.00010 | $0.00148 |
| Haiku 4.5 | $0.00005 | $0.00074 |
Grade A, and why
new-project-docker scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 50 lines — stays where its author put it; the contents beside it link to each section on GitHub.
new-project-docker — new project = Docker + Makefile
Invariant: every new project is containerized from the start. Not "local first,
wrap it later" — from the first commit there's a Dockerfile, docker-compose.yml,
Makefile and log wiring. This kills "works on my machine", gives unified commands and
turns on observability right away.
What we create in the skeleton
Dockerfile— app image (multi-stage if compiled; slim base).docker-compose.yml— app service(s) + deps (db/cache/queue). Each service —restart,mem_limit/cpus, healthcheck where apt..env+.env.example— cfg (secrets in.env, it's in.gitignore;.env.examplewith placeholders in git).Makefile— unified commands (template in templates.md):help,info,up,down,ps,restart name=…,logs name=…,build,config,log-test.HOST_IPcomputed dynamically (hostname -I).- Logging — wire up skill
fluent-loggingright away: submodule/composer libs, overlaydocker/fluent-logging.yml, env block,COMPOSE_FILE. Containers write structured JSON to stdout → fluent-bit → Graylog. .gitignore,README.md/DEPLOY.mdwith the command list.
Happy-path
- Create repo +
git init. Commits — per git-flow core. Dockerfile+docker-compose.yml(app + deps).Makefilefrom templates.md — adjust service names/ports..env/.env.example(incl. fluent-logging block from skillfluent-logging).- Wire up logs (skill
fluent-logging): lib + overlay +COMPOSE_FILE. make config→make up→make log-test→ check arrival in Graylog.
Principles
- Host ports — unique on the machine (don't collide with other projects;
ss -ltn). Bind to127.0.0.1:<port>if not needed externally. COMPOSE_PROJECT_NAMEset in.env(else broken container names and prefixes in Graylog).- Resource limits (
mem_limit/cpus) with headroom — but set them, don't leave unset. - Deps — managed images (postgres/redis/…), don't install into the app image.
- Deploy =
docker compose build && up -d(+git submodule update --initif log lib is a submodule). Document inDEPLOY.md.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 50 lines · 50 tokens per session scan A 2ede3b62a07d
new-project-docker is a skill published in the GitHub repository Xakki/ai-agents-skills (6 stars, last pushed 20d ago), licensed MIT. It adds 50 tokens to every session and 741 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
ag-preparar-ambiente
Gera e mantém infraestrutura de desenvolvimento e CI/CD: Dockerfile, docker-compose, pipeline, env vars. Dev novo roda em 10 min.
openpanel
Query self-hosted OpenPanel analytics — funnel counts, unique users, breakdowns by os/country/path, raw events. Use whenever analytics numbers are needed: funnel conversion, visitor counts, event counts over a window, period-over-period deltas, "how many signups/checkouts/sessions", or any /darkflow:analytics-review…
kubernetes-specialist
Expert Kubernetes specialist mastering container orchestration, cluster management, and cloud-native architectures. Specializes in production-grade deployments, security hardening, and performance optimization with focus on scalability and reliability.
docker-development
Docker and container development agent skill and plugin for Dockerfile optimization, docker-compose orchestration, multi-stage builds, and container security hardening. Use when: user wants to optimize a Dockerfile, create or improve docker-compose configurations, implement multi-stage builds, audit container…
docker-patterns
Docker and Docker Compose patterns for local development, container security, networking, volume strategies, and multi-service orchestration. Use when setting up containerized development environments or reviewing Docker configurations.
docker
Docker containerization best practices for building, securing, and deploying containers.