Docker Cleanup Toolkit

• Outcome: Pass
• Latest audit: May 29, 2026 · 8:46 PM UTC
• Version: 1.0.0

Overview

This is a coherent Docker cleanup helper, but users should run analysis first because its explicit cleanup flags can delete Docker resources.

Install only if you want an agent to inspect and clean your local Docker environment. Start with the default analysis or `--report`, review what Docker resources are unused, and avoid `--all`, `--volumes`, or `--force` unless you are comfortable permanently deleting Docker resources. Generated reports may contact jsDelivr for Bootstrap styling when opened.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill advertises shell execution and report generation/file output behavior but does not declare any permissions or safety boundaries. This creates a trust gap: an agent or reviewer cannot readily determine that the skill may invoke Docker commands and write HTML reports to disk, increasing the chance of unintended privileged actions in a sensitive Docker environment.

Context-Inappropriate Capability

Medium

• Confidence: 89% confidence
• Finding: The generated local HTML report loads Bootstrap CSS from an external CDN, causing network access when the report is opened and leaking that the report was viewed, along with client metadata such as IP address and user agent. For a local Docker cleanup utility, this external dependency is not necessary and increases privacy and supply-chain risk if the CDN content is unavailable or tampered with.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The documented commands include pruning containers, images, volumes, networks, and especially `--all --force`, but the skill does not provide a clear warning that these operations permanently delete Docker resources and may remove data users still care about. In a cleanup/admin skill, destructive behavior is contextually expected, but the absence of explicit safety warnings and scope limitations makes accidental data loss more likely.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

| `python3 docker_cleanup.py --volumes` | Prune unused volumes |
| `python3 docker_cleanup.py --networks` | Prune unused networks |
| `python3 docker_cleanup.py --all` | Full system prune (all of the above) |
| `python3 docker_cleanup.py --all --force` | Auto-confirm all pruning |
| `python3 docker_cleanup.py --json` | JSON output for programmatic use |
| `python3 docker_cleanup.py --report` | Generate HTML report |
| `python3 docker_cleanup.py --analyze` | Explicit analysis mode |

• Confidence: 86% confidence
• Finding: Auto-confirm

VirusTotal

66/66 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.