ClawHub
Back to skill

Security audit

Docker Essentials 1.0.0

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Docker command reference, but users should be careful because some examples can delete Docker resources or publish images if run directly.

Install this if you want Docker command help. Before running any rm, prune, down -v, volume cleanup, or push command, inspect what it will affect, back up important volume data, and avoid broad cleanup on shared or production hosts unless deletion is intentional.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill includes destructive cleanup commands such as `docker system prune`, `docker system prune -a`, and `docker system prune --volumes` without warning that they can irreversibly delete stopped containers, unused images, networks, build cache, and volumes. In a general-purpose Docker skill, users may copy-paste these commands during troubleshooting and accidentally cause data loss or service disruption.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
`docker-compose down -v` removes associated volumes, which can delete persisted application or database data. Because this appears in a basic operations section without a caution note, readers may treat it as a routine shutdown command and unintentionally destroy stateful data.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
Examples for removing containers and pruning resources omit warnings about irreversible deletion. Even though these are standard Docker commands, presenting them in an instructional skill without context increases the chance of accidental deletion of containers, images, or volumes by inexperienced users.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.