Menu

Not in the top 1,000 by GitHub stars

AIops-tools/Container-Host-AIops

Governed AI-ops for Docker + Portainer container hosts — restart-loop/resource/bloat RCA, guarded writes, with audit/budget/undo (preview)

Claude CodeDevOpsFinanceSecurity

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

skills/container-host-aiops/SKILL.md

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 2f723499150e

No earlier version was observed for comparison.

Compare on GitHub

View on GitHubAdd to my skills

Verified commit 2f723499150ea42e9cff32779dec3bb0a0c73f33

git clone --filter=blob:none --no-checkout https://github.com/AIops-tools/Container-Host-AIops.git .hotskills/aiops-tools-container-host-aiops && git -C .hotskills/aiops-tools-container-host-aiops checkout --detach 2f723499150ea42e9cff32779dec3bb0a0c73f33 # Copy each selected skill directory from .hotskills/aiops-tools-container-host-aiops into .claude/skills/<skill-name>/
1GitHub star
1star in 7 days
1skill in this repository
7commits in 30 days

Heat

2.9
  • Star growth, last 7 daysNot available
  • Star growth, last 24 hoursNot available
  • Rank movement, last 7 daysNot available
  • Commits, last 30 daysNot available
  • Accounts asking about it through MCP, last 7 daysNot available
  • Hot votes this weekNot available

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Oct 25, 2026Nov 1, 20261

30-day change not yet available: not enough history.

Individual skills in this repository

How it works

container-host-aiops

When your agent uses it

Use this skill whenever the user needs to operate a single container host through the Docker Engine API, Portainer, or Podman — a one-shot host overview; container reads (list/inspect, logs tail, CPU/memory stats, top processes, restart summary); image reads (list, inspect with history, dangling, disk usage); volume reads (list, inspect, dangling); network reads (list, inspect); system reads (info, version, df disk-usage, recent events); Portainer stacks + endpoints; Compose-project rollups (list_compose_stacks, docker+podman); Podman pods (list_pods, podman-only); three flagship analyses — restart-loop RCA (crash-looping containers + cause/action), resource-pressure analysis (CPU/memory vs limits), and image & volume bloat (prune candidates + reclaimable bytes); and eight guarded writes (restart/stop/start/remove a container, prune images/volumes, update resource limits, recreate a Portainer stack). Always use this skill for "Docker host overview", "which containers are crash-looping", "restart loop", "why does this container keep restarting", "container CPU/memory usage", "docker logs", "which containers are near their limits", "resource pressure", "dangling images/volumes", "reclaim disk", "prune images", "stop/start/restart a container", "update a container's memory limit", "Portainer stacks", "compose stacks", "Podman pods" when the context is a Docker, Portainer, or Podman container host. Do NOT use when the target is a cluster orchestrator, a hypervisor, a storage appliance, a backup product, network device config, or OT/industrial equipment — route those to the appropriate other AIops-tools skill. This is for NON-orchestrator container hosts. Governed Docker/Portainer/Podman container-host operations with a built-in governance harness (audit, policy, token budget, undo, risk-tiers). Exercised against a live Docker Engine 27.5.1 daemon (doctor, overview, the three flagship analyses, and a governed stop_container with audit + undo recorded); the Portainer and Podman API paths are covered by the mock suite only. See docs/VERIFICATION.md.

What it loads into context

Frontmatter

1,402 tokens

Always available to the agent

SKILL.md

4,305 tokens

When the skill is activated

Reference documents

5,967 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

  1. What This Skill Does
  2. Quick Install
  3. When to Use This Skill
  4. Related Skills — Skill Routing
  5. Common Workflows
  6. Governance & Safety
  7. References

Files

  • ../../.claude-plugin/plugin.jsonasset653 bytes
  • SKILL.mdcore18,225 bytes
  • SKILL.mdcore18,225 bytes
  • SKILL.mdcore18,225 bytes
  • SKILL.mdcore18,225 bytes
  • SKILL.mdcore18,225 bytes
  • references/agent-guardrails.mddoc7,737 bytes
  • references/capabilities.mddoc6,870 bytes
  • references/cli-reference.mddoc4,534 bytes
  • references/setup-guide.mddoc5,258 bytes
Read SKILL.md

# Container Host AIops

> **Audit availability:** Real writes require a durable audit intent. Reads and previews can continue if audit storage fails; check the warning and audit health before relying on their audit trail.

> **Disclaimer**: Community-maintained open-source project, **not affiliated with, endorsed by, or sponsored by Docker, Inc., Portainer.io, or any container-platform vendor.** Product and trademark names belong to their owners. Source at [github.com/AIops-tools/Container-Host-AIops](https://github.com/AIops-tools/Container-Host-AIops) under the MIT license.

Governed Docker + Portainer + Podman container-host operations — **38 MCP tools**, every one wrapped with the bundled `@governed_tool` harness: a local unified audit log under `~/.container-host-aiops/` (MCP + CLI alike), a runaway/budget safety guard, and undo-token recording. It records every operation; whether a write is permitted is the agent's or the account's call, not the skill's. A Docker target speaks the Docker Engine API over a unix socket or TCP; a Portainer target speaks the Portainer API (and proxies Docker); a Podman target speaks over its rootful/rootless socket (Docker-compat + libpod). The Portainer API token is stored **encrypted** (`~/.container-host-aiops/secrets.enc`, Fernet + scrypt) — never plaintext on disk; a local Docker/Podman socket needs no secret.

> **Standalone**: the governance harness is bundled in the package (`container_host_aiops.governance`) — container-host-aiops has no external skill-family dependency. **Verification**: Exercised against a live Docker Engine 27.5.1 daemon (doctor, overview, the three flagship analyses, and a governed stop_container with audit + undo recorded); the Portainer and Podman API paths are covered by the mock suite only. See `docs/VERIFICATION.md`.

## What This Skill Does

| Domain | Tools | Count | Read or Write |
|--------|-------|:-----:|:-------------:|
View the complete source on GitHub

Skills included

  • container-host-aiops

Repository facts

License
MIT
Created
Jul 13, 2026
Last pushed
Oct 30, 2026
Forks
0
Open issues
0
Project activity
Active

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 5, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 4 notes
  • skills/container-host-aiops/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/container-host-aiops/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/container-host-aiops/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/container-host-aiops/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
Show all 21 signals by file

.claude-plugin/plugin.json

  • Network accessline 1
    {   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
  • Network accessline 2
    "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
  • Network accessline 8
    "name": "Wei Zhou",     "email": "zhouwei008@gmail.com",     "url": "https://github.com/AIops-tools"
  • Network accessline 9
    "email": "zhouwei008@gmail.com",     "url": "https://github.com/AIops-tools"   },
  • Network accessline 10
    "url": "https://github.com/AIops-tools"
  • Network accessline 11
    },   "homepage": "https://github.com/AIops-tools/Container-Host-AIops",   "repository": "https://github.com/AIops-tools/Container-Host-AIops",
  • Network accessline 12
    "homepage": "https://github.com/AIops-tools/Container-Host-AIops",
  • Network accessline 13
    "repository": "https://github.com/AIops-tools/Container-Host-AIops",

skills/container-host-aiops/SKILL.md

  • Broad permissionsline 1
    Bash
  • Network accessline 5
    summary: "Governed Docker + Portainer container-host ops: reads, RCA analyses, guarded writes. 38 tools." license: MIT homepage: https://github.com/AIops-tools/Container-Host-AIops
  • Network accessline 6
    license: MIT homepage: https://github.com/AIops-tools/Container-Host-AIops tags: [aiops, mcp, governance, container-host]
  • Network accessline 7
    homepage: https://github.com/AIops-tools/Container-Host-AIops
  • Network accessline 18
    allowed-tools:   - Bash metadata: {"openclaw":{"requires":{"anyBins":["container-host-aiops","uvx"]},"optional":{"env":["CONTAINER_HOST_AIOPS_CONFIG","CONTAINER_HOST_AIOPS_MASTER_PASSWORD"]},"homepage":"https://github.com/AIops-tools/Contai
  • Network accessline 19
    - Bash metadata: {"openclaw":{"requires":{"anyBins":["container-host-aiops","uvx"]},"optional":{"env":["CONTAINER_HOST_AIOPS_CONFIG","CONTAINER_HOST_AIOPS_MASTER_PASSWORD"]},"homepage":"https://github.com/AIops-tools/Container-Host-AIops","
  • Network accessline 20
    metadata: {"openclaw":{"requires":{"anyBins":["container-host-aiops","uvx"]},"optional":{"env":["CONTAINER_HOST_AIOPS_CONFIG","CONTAINER_HOST_AIOPS_MASTER_PASSWORD"]},"homepage":"https://github.com/AIops-tools/Container-Host-AIops","emoji":
  • Network accessline 37
    > **Disclaimer**: Community-maintained open-source project, **not affiliated with, endorsed by, or sponsored by Docker, Inc., Portainer.io, or any container-platform vendor.** Product and trademark names belong to their owners. Source at [g

skills/container-host-aiops/references/agent-guardrails.md

  • Network accessline 127
    Feedback on running this with a specific local model is genuinely useful — open an issue at [github.com/AIops-tools/Container-Host-AIops](https://github.com/AIops-tools/Container-Host-AIops/issues)
  • Network accessline 128
    open an issue at [github.com/AIops-tools/Container-Host-AIops](https://github.com/AIops-tools/Container-Host-AIops/issues) with the model, runtime, and what went wrong.
  • Network accessline 129
    [github.com/AIops-tools/Container-Host-AIops](https://github.com/AIops-tools/Container-Host-AIops/issues)

skills/container-host-aiops/references/cli-reference.md

  • Dangerous shell operationline 22
    container-host-aiops secret rm <target>                     # delete a stored token
  • Access to secretsline 23
    [Credential-related source omitted]

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Some files could not be read; the facts below still hold.

Signal confidence: 13 facts

Works with

Agent compatibility, from the files in this repository
AgentStatusEvidenceInstall to
Claude CodeNativeManifest .claude-plugin/plugin.json.claude/skills/<skill-name>/
CodexCompatibleStandard SKILL.md skills/container-host-aiops/SKILL.md.agents/skills/<skill-name>/
CursorCompatibleStandard SKILL.md skills/container-host-aiops/SKILL.md.cursor/skills/<skill-name>/
Gemini CLICompatibleStandard SKILL.md skills/container-host-aiops/SKILL.md.gemini/skills/<skill-name>/
GitHub CopilotCompatibleStandard SKILL.md skills/container-host-aiops/SKILL.md.github/skills/<skill-name>/
OpenCodeCompatibleStandard SKILL.md skills/container-host-aiops/SKILL.md.opencode/skills/<skill-name>/
  • Native The repository ships a manifest, folder or frontmatter field for this agent.
  • Compatible A standard SKILL.md that this agent can read.
  • Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

You might also use

AIops-tools/K8s-AIops

Standalone governed Kubernetes ops — 15 MCP tools with built-in audit/budget/undo/risk-tier harness

0GitHub stars

AIops-tools/Ceph-AIops

Governed Ceph mgr Dashboard ops: HEALTH_WARN RCA, OSD/PG/pool/RBD/CephFS/RGW, 35 MCP tools (preview)

0GitHub stars

AIops-tools/Proxmox-AIops

Standalone governed Proxmox VE ops — 23 MCP tools with built-in audit/budget/undo/risk-tier harness

4GitHub stars

AIops-tools/TrueNAS-AIops

1GitHub stars

AIops-tools/MinIO-AIops

Governed AI-ops for MinIO object storage: capacity & usage RCA, bucket exposure audit, lifecycle/ILM

0GitHub stars

AIops-tools/MySQL-AIops

Governed AI-ops for MySQL/MariaDB DBA operations: slow-query RCA, InnoDB lock-wait & deadlock analys

0GitHub stars