Offline Dockerfile linter with image-size hygiene and a bundled 262k-record OSV CVE database
Single tool 'shipcheck_scan' has a clear, concise description (79 chars) and a minimal but present input schema. However, the schema lacks depth: only one required parameter with a basic string type and no format/pattern constraints. No output schema is documented, the tool returns JSON but the structure is not specified. Parameter description is generic ('Path to Dockerfile to scan') and does not explain expected format, error cases, or what 'findings' means. No error handling guidance. Tool naming is acceptable (verb_noun pattern) but the description does not explain WHEN to use it vs alternatives, what prerequisites exist, or how to interpret results. Baseline: avg tool description 194 chars (this is 79); avg params per tool 4 (this has 1). The server exposes only one tool, limiting composition assessment.
Dockerfile linter with image-size and CVE advisories. Returns JSON findings.
No output schema documented. Tool returns JSON findings but structure is not specified. LLMs cannot plan downstream processing or extract specific fields.
Parameter description lacks actionable detail. 'Path to Dockerfile to scan' does not specify: absolute vs relative paths, file existence validation, error handling for missing files, or expected format.
Tool description does not explain WHEN to use it or what 'findings' means. Does not state that it performs linting, image-size checks, and CVE scanning. LLMs cannot determine if this is the right tool without reading implementation.
No error handling guidance. Tool may fail on invalid paths, unreadable files, or malformed Dockerfiles, but no recovery hints provided to LLM.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 51 | 2026-07-28+ | v2 |
Input schema has no format, pattern, or constraint on 'target' parameter. LLMs may pass invalid paths, URLs, or non-existent files without validation.