A professional-grade auditing tool that identifies security vulnerabilities and build inefficiencies in Docker configurations.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install container-reviewer
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install container-reviewer using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Dockerfile Reviewer?
The Dockerfile Reviewer is a specialized utility within the Openclaw Skills ecosystem designed to harden and optimize containerized environments. It performs deep static analysis on Dockerfiles, docker-compose.yml files, and .dockerignore patterns to ensure your infrastructure follows industry-standard best practices.
By evaluating configurations against a rigorous checklist of security and performance criteria, this skill helps developers reduce their attack surface and minimize image bloat. Whether you are prepping for a production launch or troubleshooting a slow CI/CD pipeline, this tool provides actionable, copy-pasteable corrections to improve your container lifecycle.
Dockerfile Reviewer Use Cases
- Reviewing Dockerfiles for production readiness and security compliance.
- Identifying the cause of oversized container images and optimizing build layers.
- Auditing docker-compose files for resource limits and service dependencies.
- Modernizing legacy builds by migrating to multi-stage Dockerfile patterns.
- Hardening containers by implementing non-root user directives and secret management.
How Dockerfile Reviewer Works
- The user provides a Dockerfile, docker-compose.yml, or related configuration file for analysis.
- The skill parses the configuration, evaluating it against security, size, and correctness checklists.
- It categorizes findings into Critical, Warning, and Suggestion tiers based on severity.
- The skill generates a structured report featuring 'Before' and 'After' code snippets for immediate remediation.
- A summary is provided to estimate potential image size savings and highlight the most significant risks.
Dockerfile Reviewer Setup
To integrate this capability into your workflow, ensure your environment supports Openclaw Skills. Install the reviewer using the following command:
openclaw install dockerfile-reviewer
Once installed, you can trigger a review by passing your Docker configuration directly to your AI agent.
Dockerfile Reviewer Data Schema & Taxonomy
The Dockerfile Reviewer organizes its findings into a structured taxonomy to ensure clarity for developers:
| Category | Focus Area | Example Metrics |
|---|---|---|
| Security | Runtime & Supply Chain | Root access, unpinned base images, exposed secrets. |
| Image Size | Efficiency & Layers | Layer chaining, cache management, .dockerignore usage. |
| Correctness | Logic & Networking | ENTRYPOINT vs CMD, WORKDIR accuracy, port mapping. |
| Compose | Orchestration | Restart policies, resource limits, health checks. |
Dockerfile Reviewer Advanced Features
- Multi-stage build optimization to separate build-time dependencies from production artifacts.
- Target environment awareness to provide context-specific advice for local dev vs. production.
- Automated self-improvement logic that tracks frequent mistakes across 20+ reviews to provide a 'Top 3 Mistakes' summary.
- Specific support for .dockerignore patterns to prevent sensitive local data from leaking into image layers.
SKILL.md
Loading
Related Openclaw Skills
OpenClaw-Kilo-Agent
A high-performance execution agent that handles heavy-duty coding tasks and complex browser automation workflows via the Kilo CLI.
Seedance Video Generation
A professional AI video generation skill that leverages ByteDance's Seedance models to create realistic dance and character motion from text or image inputs.
Superdocu
A powerful integration for Superdocu that enables AI agents to manage secure document storage, workspaces, and user workflows via the Membrane CLI.
Producer Music AI
An advanced AI music production suite for generating high-fidelity songs, lyrics, and complex audio edits via API.
Stock Top Gainers
An automated market analysis tool that identifies the top 20 A-share stocks with the highest gains over the last 10 trading days, excluding high-risk ST shares.
Cflow
A powerful integration for managing Cflow business workflows, record entries, and automated approval processes directly through an AI agent.
Featured*
