Lerwee Docker Lwops Deployer

• Outcome: Review
• Latest audit: May 29, 2026 · 9:28 PM UTC
• Version: 1.0.0

Overview

This Docker deployment skill appears purpose-aligned, but it asks users to grant very broad host privileges that need manual review before installation.

Review this before installing on a real machine. Do not apply the NOPASSWD: ALL sudoers command, avoid privileged containers unless you understand why they are required, and inspect any deploy or cleanup commands for containers, images, volumes, and local files they may remove.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (15)

Context-Inappropriate Capability

High

• Confidence: 99% confidence
• Finding: The guide explicitly recommends granting the current user passwordless sudo for ALL commands via a sudoers entry. This is far broader than required for Docker deployment and effectively removes an important privilege boundary, making any compromise of that user account much more damaging.

Missing User Warnings

Medium

• Confidence: 81% confidence
• Finding: The installation guide states that the skill may automatically install Docker and perform privileged operations, but it does not prominently warn users that enabling or testing the skill can modify the host system. In a skill intended for local execution with sudo, lack of clear consent and change disclosure increases the risk of unexpected system modification.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The uninstall and cleanup section includes destructive commands such as container removal, image deletion, and `rm -rf` of the skill directory without a strong warning about permanence or possible data loss. Users may execute these commands assuming they are harmless housekeeping, leading to unintended deletion of Docker assets or local files.

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: Recommending passwordless sudo for all commands without a prominent security warning normalizes a dangerous system-wide privilege escalation configuration. This guidance can directly weaken host security well beyond the scope of the Docker deployment skill.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The README advertises automatic Docker installation and container redeployment/deletion without a prominent warning that these actions modify the host system and may destroy existing containers or state. In an agent skill context, users may invoke the skill through natural language and not realize it can perform privileged, system-changing operations, increasing the chance of unsafe execution.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The README documents running the container with --privileged and, for cgroup v2, potentially writable cgroup mounts, but does not clearly warn that this materially weakens container isolation and can affect host integrity. In a deployment skill, normalizing these settings without strong caution can lead users to grant near-host-level access to untrusted or insufficiently reviewed images.

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The documentation says redeployment will delete and recreate an existing container, but it does not prominently warn that this is destructive and may interrupt services or discard state if volumes are not preserved. In a deployment skill, this omission can lead users to trigger irreversible changes they did not intend.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill advertises automatic Docker installation but does not clearly warn that this requires elevated privileges and changes the host by installing packages and services. Hidden privilege requirements are risky because users may authorize significant system modification without understanding the scope of impact.

Missing User Warnings

High

• Confidence: 97% confidence
• Finding: The skill documents use of a privileged container and writable cgroup mounts in some environments, but it does not present this as a strong security warning. Privileged Docker containers substantially reduce isolation from the host and can enable container escape or broad host compromise if the image or workload is unsafe.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### 其他要求

- Bash >= 4.0
- sudo 权限（用于安装 Docker 和管理容器）
- 网络连接（访问华为云 SWR 镜像仓库）

## 🚀 快速开始

• Confidence: 84% confidence
• Finding: sudo

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

**症状**: 提示需要 sudo 权限

**解决方案**:
1. 使用 sudo 运行命令
2. 将用户添加到 sudo 组：`sudo usermod -aG sudo $USER`
3. 配置 sudo 无密码：`echo "$USER ALL=(ALL) NOPASSWD: ALL" | sudo tee /etc/sudoers.d/$USER`

• Confidence: 95% confidence
• Finding: sudo

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

**解决方案**:
1. 使用 sudo 运行命令
2. 将用户添加到 sudo 组：`sudo usermod -aG sudo $USER`
3. 配置 sudo 无密码：`echo "$USER ALL=(ALL) NOPASSWD: ALL" | sudo tee /etc/sudoers.d/$USER`

## 📚 相关文档

• Confidence: 99% confidence
• Finding: sudo

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

**解决方案**:
1. 使用 sudo 运行命令
2. 将用户添加到 sudo 组：`sudo usermod -aG sudo $USER`
3. 配置 sudo 无密码：`echo "$USER ALL=(ALL) NOPASSWD: ALL" | sudo tee /etc/sudoers.d/$USER`

## 📚 相关文档

• Confidence: 99% confidence
• Finding: sudo

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

**解决方案**:
1. 使用 sudo 运行命令
2. 将用户添加到 sudo 组：`sudo usermod -aG sudo $USER`
3. 配置 sudo 无密码：`echo "$USER ALL=(ALL) NOPASSWD: ALL" | sudo tee /etc/sudoers.d/$USER`

## 📚 相关文档

• Confidence: 99% confidence
• Finding: sudo

Chaining Abuse

High

• Category: Tool Misuse

Content

**解决方案**:
1. 使用 sudo 运行命令
2. 将用户添加到 sudo 组：`sudo usermod -aG sudo $USER`
3. 配置 sudo 无密码：`echo "$USER ALL=(ALL) NOPASSWD: ALL" | sudo tee /etc/sudoers.d/$USER`

## 📚 相关文档

• Confidence: 96% confidence
• Finding: | sudo

VirusTotal

66/66 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.destructive_delete_command

Documentation contains a destructive delete command without an explicit confirmation gate.

Warn

• Code: suspicious.destructive_delete_command
• Location: INSTALL.md:280