ClawHub
Back to skill

Security audit

Docker Compose Deploy

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Docker Compose deployment guide with no executable payload or hidden behavior found.

Before installing, understand that this guide helps an agent run Docker deployment commands on your server. Review the docker-compose.yml and .env values yourself, avoid committing real passwords, confirm exposed ports and firewall rules, and keep backups before running migrations or upgrades.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.