Dcc Docker Container Control

• Outcome: Pass
• Latest audit: Sep 2, 2026 · 7:29 AM UTC
• Version: 1.0.1

Overview

This is a disclosed Docker Compose deployment helper that can rebuild and restart apps with sudo, so it should only be used on servers where agent-run deploys are intended.

Install this only if you want an agent to run Docker Compose deployment commands on a known server. Confirm the target host and app name before issuing deploy, recreate, or restart commands, and review the bundled controller before allowing first-time root installation on a server.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill instructs the agent to immediately run a deployment command that changes remote application state, updates code, rebuilds containers, and restarts services, but it does not require an explicit confirmation or impact warning before doing so. In an agent setting, this increases the chance of unintended production changes from a terse user prompt and can cause downtime or accidental rollout of unreviewed code.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill allows the agent to install a controller onto the remote server and place it in /opt with root ownership, which is a privileged system modification, yet it does not mandate a strong user approval step specifically for that installation. Even with a local syntax check, this creates a path for an agent to copy and install code on a server as root, expanding trust and persistence on the target host.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

2. Validate it locally with `python3 -m py_compile <controller>`.
3. Copy it to a temporary path on the Docker server.
4. Install it as root-owned mode `755` at `/opt/docker-container-control`.
5. Verify with `sudo /opt/docker-container-control list`.
6. Continue the user's requested DCC action without making them repeat it.

If an existing remote controller differs from the bundled version, do not silently overwrite it. Report the difference and ask before replacing it.

• Confidence: 88% confidence
• Finding: The skill explicitly directs use of sudo to run a remotely installed controller, meaning the agent is expected to execute privileged operations on the server. In context, this is not inherently malicious, but it is dangerous because any mistake, prompt injection into parameters, or compromised controller path would execute with elevated privileges and could alter system state broadly.

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.