Phpmyadmin Manager
ReviewAudited by ClawScan on May 10, 2026.
Overview
This skill appears to do what it says: start, stop, and report on a local phpMyAdmin Docker container, with the main cautions being Docker access, database admin access, an external container image, and a container configured to restart until stopped.
This skill looks suitable for local development if you expect it to manage a phpMyAdmin Docker container. Before installing, confirm that Docker access is acceptable, that the MySQL instance is not production or sensitive, that localhost port 8081 is appropriate, and that you stop the container when finished.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent can start and stop this local phpMyAdmin container when asked, which may affect local development services.
The skill starts a Docker Compose service. This is expected for a Docker container manager, but Docker actions can change the local runtime environment.
docker compose -f "$COMPOSE_FILE" up -d
Install only if you are comfortable letting the skill manage this Docker container, and review the compose file before first use.
Anyone with access to the local machine and the MySQL root password could use the UI to view, change, or delete databases.
The skill exposes a phpMyAdmin login for MySQL root administration. This is purpose-aligned, but it grants high-impact database management authority.
Open `http://localhost:8081` in a browser. Login: `root` / MySQL root password.
Use this only for local development databases, keep the MySQL root password private, and avoid connecting it to production or sensitive databases.
A future pull of the same tag could run a different image version than the one originally reviewed.
The container image is referenced by tag rather than immutable digest. This is common Docker usage, but the exact image contents can change if the tag is updated upstream.
image: phpmyadmin:5.2-apache
For stricter reproducibility, pin the image to a trusted digest or review the image source before use.
phpMyAdmin may remain available on localhost after the initial task or after a reboot.
The container is configured to keep running and restart after Docker or host restarts unless explicitly stopped. The SKILL.md also discloses this behavior.
restart: unless-stopped
Run the documented stop command when finished: `<plugin-root>/phpmyadmin-manager/run.sh stop`.
