Phpmyadmin Manager

ReviewAudited by ClawScan on May 10, 2026.

Overview

This skill appears to do what it says: start, stop, and report on a local phpMyAdmin Docker container, with the main cautions being Docker access, database admin access, an external container image, and a container configured to restart until stopped.

This skill looks suitable for local development if you expect it to manage a phpMyAdmin Docker container. Before installing, confirm that Docker access is acceptable, that the MySQL instance is not production or sensitive, that localhost port 8081 is appropriate, and that you stop the container when finished.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can start and stop this local phpMyAdmin container when asked, which may affect local development services.

Why it was flagged

The skill starts a Docker Compose service. This is expected for a Docker container manager, but Docker actions can change the local runtime environment.

Skill content
docker compose -f "$COMPOSE_FILE" up -d
Recommendation

Install only if you are comfortable letting the skill manage this Docker container, and review the compose file before first use.

What this means

Anyone with access to the local machine and the MySQL root password could use the UI to view, change, or delete databases.

Why it was flagged

The skill exposes a phpMyAdmin login for MySQL root administration. This is purpose-aligned, but it grants high-impact database management authority.

Skill content
Open `http://localhost:8081` in a browser. Login: `root` / MySQL root password.
Recommendation

Use this only for local development databases, keep the MySQL root password private, and avoid connecting it to production or sensitive databases.

What this means

A future pull of the same tag could run a different image version than the one originally reviewed.

Why it was flagged

The container image is referenced by tag rather than immutable digest. This is common Docker usage, but the exact image contents can change if the tag is updated upstream.

Skill content
image: phpmyadmin:5.2-apache
Recommendation

For stricter reproducibility, pin the image to a trusted digest or review the image source before use.

What this means

phpMyAdmin may remain available on localhost after the initial task or after a reboot.

Why it was flagged

The container is configured to keep running and restart after Docker or host restarts unless explicitly stopped. The SKILL.md also discloses this behavior.

Skill content
restart: unless-stopped
Recommendation

Run the documented stop command when finished: `<plugin-root>/phpmyadmin-manager/run.sh stop`.