Docker Helper

ReviewAudited by ClawScan on May 4, 2026.

Overview

This is a transparent Docker management helper; the main thing to watch is that approved Docker commands can stop, delete, or prune local Docker resources.

Install this only if you want the agent to help operate your local Docker environment. Review command targets carefully, require confirmation before remove/prune operations, back up important volumes, and ensure jq is installed or ask the agent to avoid jq-based commands.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user confirms the wrong action or target, containers, images, or volumes could be stopped or deleted.

Why it was flagged

The skill instructs the agent to use Docker CLI commands that can change, stop, remove, or prune Docker resources. The destructive commands are disclosed and confirmation-gated, so this is purpose-aligned but still high-impact.

Skill content
`docker start/stop/restart [container]`; `docker rm -f [container] (only with user confirmation)`; `docker system prune -a -f`; `docker volume prune -f`
Recommendation

Verify container, image, and volume names before approving changes; keep backups of important volumes; avoid using cleanup commands on production systems unless intended.

What this means

Some commands may fail unless jq is already installed, or the agent may need to use a different Docker formatting command.

Why it was flagged

The instructions rely on jq for some inspect/debug commands, but jq is not declared as a required binary in the skill metadata.

Skill content
Required bins list `docker` and `docker-compose`, while the workflow uses `docker inspect [container] | jq '.[0].NetworkSettings.Ports'`.
Recommendation

Declare jq as an optional or required dependency, or use Docker's built-in formatting options when jq is unavailable.