Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

lazydocker

v0.1.0

lazydocker - Docker 和 Docker Compose 的终端 UI 管理工具

0· 45·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description, guides, and runtime instructions all align: the skill is an assistant for installing and using lazydocker and managing Docker resources. The files reference only Docker-related tools, configs, and paths one would expect (e.g., ~/.config/jesseduffield/lazydocker, DOCKER_HOST).
Instruction Scope
Instructions ask the agent to check Docker, install lazydocker, launch the TUI, edit config.yml, and run Docker operations (exec, logs, prune, push). Those steps are within scope for a docker/TUI helper, but the docs also include destructive operations (docker system prune, rm, deleting volumes) and suggestions to run remote-install scripts and sudo moves — these are expected for installing/maintaining the tool but require explicit user consent.
Install Mechanism
The skill is instruction-only (no install spec). Installation methods described include Homebrew, go install, manual binary download from GitHub Releases, and piping the official install script from raw.githubusercontent.com into bash. These are common but carry the usual risks of executing network-fetched install scripts. One Docker-run example references the image lazyteam/lazydocker which is not clearly the official upstream image and should be verified before use.
Credentials
The skill declares no required environment variables or secrets. It shows examples using standard Docker variables (DOCKER_HOST, DOCKER_TLS_VERIFY, DOCKER_CERT_PATH) and accesses user config paths under the user's home — all proportionate to Docker/lazydocker functionality. No unrelated credentials or high-privilege config paths are requested.
Persistence & Privilege
always is false and there is no install-time code that claims to persist or modify other skills or system-wide agent settings. The skill expects to read/write the user's lazydocker config under their home directory, which is normal for a tool of this type.
Assessment
This skill appears to do what it says: help install and run lazydocker. Before running it (or allowing an agent to run commands) consider these precautions: 1) Review any remote-install commands (curl | bash or downloads from GitHub) before executing — prefer official release artifacts and verify checksums when possible. 2) The docker run example mounts /var/run/docker.sock (gives the container full Docker control of the host); only use that if you trust the image and its publisher. 3) Destructive commands (docker system prune, rm, deleting volumes) are included — do not run them without explicit confirmation and backups. 4) The guide references a Docker Hub image name (lazyteam/lazydocker) that may not be official — verify the image publisher. 5) If you will connect to remote Docker hosts, prefer SSH or TLS with verified certs rather than unencrypted TCP on 2375. If you want greater assurance, ask the skill author to (a) replace any untrusted image references with official sources, (b) avoid piping remote scripts by providing commands to download+verify before executing, and (c) require explicit user confirmation before running destructive operations.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🐳 Clawdis
latestvk975h6hx16xk6yhns8y0wed6es84xh1p
45downloads
0stars
1versions
Updated 4d ago
v0.1.0
MIT-0

lazydocker Docker 终端 UI 管理助手

技能概述

本技能帮助用户通过 lazydocker 的终端 UI 界面管理 Docker 容器、镜像、卷和网络,支持以下场景:

  • 容器管理: 查看、启动、停止、重启、删除容器,实时查看日志和资源占用
  • 镜像管理: 列出、拉取、删除镜像,查看镜像层信息
  • 卷管理: 查看和删除 Docker 卷
  • Docker Compose: 管理 Compose 服务的完整生命周期
  • 实时监控: 查看 CPU、内存、网络 I/O 等实时统计信息

支持平台: macOS、Linux、Windows(WSL2)、Docker Desktop

使用流程

AI 助手将引导你完成以下步骤:

  1. 检查并安装 lazydocker(如未安装)
  2. 确认 Docker 守护进程正在运行
  3. 启动 lazydocker 并进入 TUI 界面
  4. 根据需求执行容器/镜像/卷操作
  5. 验证操作结果

关键章节导航

AI 助手能力

当你向 AI 描述 Docker 管理需求时,AI 会:

  • 自动检测系统环境并安装 lazydocker
  • 验证 Docker 守护进程状态
  • 指导键盘快捷键操作
  • 解析容器/镜像/卷的状态信息
  • 协助调试容器启动失败问题
  • 生成 Docker Compose 配置并通过 lazydocker 管理服务

核心功能

  • 容器面板:查看所有容器状态、日志、统计信息
  • 镜像面板:浏览本地镜像,支持删除和拉取
  • 卷面板:管理 Docker 持久化卷
  • 服务面板:Docker Compose 服务管理(需在 compose 项目目录启动)
  • 网络面板:查看 Docker 网络配置
  • 实时日志:容器日志流式展示,支持搜索
  • 自定义命令:支持在 config.yml 中配置自定义操作
  • 键盘驱动:完整键盘导航,无需鼠标

界面布局

┌─────────────────────────────────────────────────────────────┐
│  Containers │  Services │  Images │  Volumes │  Networks    │
├─────────────┴───────────┴─────────┴──────────┴──────────────┤
│ 左侧面板:列表视图                                           │
│  container1  running   nginx:latest                          │
│  container2  exited    redis:7.0                             │
├──────────────────────────────────────────────────────────────┤
│ 右侧面板:详情/日志/统计                                     │
│  [Logs] [Stats] [Config] [Env] [Exec]                        │
└──────────────────────────────────────────────────────────────┘

常用键盘快捷键速查

按键功能
[ / ]切换左侧面板标签(容器/服务/镜像/卷/网络)
/ 在列表中上下移动
/ 切换右侧详情标签
enter进入容器(exec bash/sh)
s停止容器
r重启容器
d删除容器/镜像/卷
u拉取最新镜像(在服务面板)
l查看日志
e打开文件编辑器
x显示可用命令菜单
q退出 lazydocker
?打开帮助界面

快速示例

# 启动 lazydocker
lazydocker

# 在项目目录中启动(自动识别 Docker Compose)
cd /path/to/compose-project && lazydocker

# 指定 Docker 上下文
DOCKER_HOST=tcp://remote-host:2375 lazydocker

安装要求

  • Docker Engine 或 Docker Desktop
  • Go 1.19+(仅从源码编译时需要)
  • 终端支持 256 色(推荐)
  • 支持 macOS 10.15+、Ubuntu 18.04+、Windows 10(WSL2)

许可证

MIT License

项目链接

Comments

Loading comments...