ClawHub
Back to skill

Security audit

Docker Ctl Tool Free

Security checks across malware telemetry and agentic risk

Overview

This skill is mainly a Docker/Podman inspection helper, but it asks for broad exec/write authority without clear limits or user-control safeguards.

Review this before installing if you use containers with sensitive logs, environment variables, volumes, or production workloads. It should be treated as a local container inspection helper only, and any write or deployment-management use should require explicit user confirmation and tight command scoping.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
84% confidence
Finding
The skill's activation criteria are very broad ('system monitoring,' 'log analysis,' 'operations alerts,' 'deployment management'), which increases the chance an agent will invoke a skill with exec/write capabilities in loosely related contexts. In an agent ecosystem, overbroad routing can expose powerful tools more often than necessary, raising the risk of unintended command execution or unsafe system interaction.

Vague Triggers

Medium
Confidence
86% confidence
Finding
The capability scope is defined with vague keyword coverage rather than precise triggers and constraints, making it easier for an orchestrating agent to match unrelated prompts. Because the skill also declares exec/write tool access, ambiguous routing increases the likelihood of the skill being selected for requests beyond safe read-only inspection, which can lead to unintended system-affecting actions.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill advertises both write and exec capabilities but does not provide a clear warning, approval boundary, or safety model for operations that could affect the host or containers. In the context of container tooling, exec access can run shell commands and write access can alter files or configurations, so insufficient disclosure and guardrails materially increase the risk of destructive or unintended actions.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.