Docker Compose Parser

Overview

You pass a Docker Compose YAML document and we return a normalized summary: services, images, ports, volumes, environment keys, dependencies, and networks, plus structural conflict findings. Environment values are never emitted — only keys. We do not run docker compose or contact a daemon; variable substitution uses only values you supply. Do not use this for live daemon validation or secret extraction.

Ad-hoc YAML parsing drops short/long port forms and leaks env values into logs. We normalize structure and keep secrets out of the response.

When to use it

Scope

Non-goals

• Does not run docker compose or contact a daemon
• Does not pull or inspect images
• Does not interpolate from the server environment
• Does not emit environment values — only keys

Properties

Capabilities

Cost & billing

Flat rate per invocation

File handling

How we handle your data

Input schema

Output schema

API contract

curl -sS -X POST "$BASE/v1/execute" -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' -d '{"skillKey":"devops.parse_docker_compose","input":{"compose":"services:\n  api:\n    image: nginx:1.27\n"}}'

import { Squillify } from "@squillify/sdk";

const sq = new Squillify({ apiKey: process.env.SQUILLIFY_API_KEY });

const { output } = await sq.execute("devops.parse_docker_compose", {"compose":"services:\n  api:\n    image: nginx:1.27\n    ports:\n      - \"8080:80\"\n"});

Errors

Other limits

Limitations

• Does not run docker compose or contact a daemon
• Does not pull or inspect images
• Does not interpolate from the server environment
• Does not emit environment values — only keys
• Runtime compose validation against a live daemon
• Reading secret values from environment blocks

How to call

POST /v1/execute (requires authentication)

{
  "skillKey": "devops.parse_docker_compose",
  "input": {
    "compose": "services:\n  api:\n    image: nginx:1.27\n    ports:\n      - \"8080:80\"\n"
  }
}

Examples

{
  "compose": "services:\n  api:\n    image: nginx:1.27\n    ports:\n      - \"8080:80\"\n"
}

{
  "networks": [],
  "_meta": {
    "unresolvedVariables": [],
    "documentCount": 1,
    "serviceCount": 1
  },
  "volumes": [],
  "services": [
    {
      "name": "api",
      "image": {
        "raw": "nginx:1.27",
        "repository": "nginx",
        "tag": "1.27"
      },
      "ports": [
        {
          "published": "8080",
          "target": 80,
          "protocol": "tcp"
        }
      ],
      "volumes": [],
      "environmentKeys": [],
      "dependsOn": [],
      "networks": [
        "default"
      ]
    }
  ],
  "findings": []
}

{
  "compose": "services:\n  web:\n    image: nginx\n    environment:\n      API_KEY: secret\n      DEBUG: \"1\"\n"
}

{
  "networks": [],
  "_meta": {
    "unresolvedVariables": [],
    "documentCount": 1,
    "serviceCount": 1
  },
  "volumes": [],
  "services": [
    {
      "volumes": [],
      "environmentKeys": [
        "API_KEY",
        "DEBUG"
      ],
      "dependsOn": [],
      "networks": [
        "default"
      ],
      "name": "web",
      "image": {
        "repository": "nginx",
        "raw": "nginx"
      },
      "ports": []
    }
  ],
  "findings": [
    {
      "details": {
        "service": "web"
      },
      "path": "/services/web/image",
      "code": "COMPOSE_IMAGE_UNTAGGED",
      "message": "Service 'web' image has neither a tag nor a digest.",
      "severity": "warning"
    }
  ]
}

Recommended use cases

• Pre-flight structural review of Compose files before deploy
• Extracting service, image, and port inventory for agents

Avoid for

• Runtime compose validation against a live daemon
• Reading secret values from environment blocks

Related skills

Composable with

Safety & privacy

• Runs without calling any external service.
• Your payloads are never stored permanently.
• Telemetry captures metadata only — never your payload contents.
• We never train models on your payloads.
• No human reviews your payloads.

Tags