Docker Claude Code Setup

• Outcome: Review
• Latest audit: May 29, 2026 · 9:31 PM UTC
• Version: 1.0.0

Overview

The skill is a coherent Docker setup guide, but it normalizes a writable web terminal and very broad agent permissions without enough access-control guidance.

Review before installing. Use this only in an isolated, trusted container; do not expose ttyd on a public IP unless it is protected by authentication, TLS, and firewall or VPN restrictions. Narrow Claude permissions to the project directory, avoid sensitive host mounts, protect persisted config directories, and prefer Docker secrets or tightly permissioned env files for API keys.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Rogue Agent: Self-Modification, Session Persistence
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (8)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 88% confidence
• Finding: The skill clearly instructs users to run shell commands, install packages, and execute scripts, yet it declares no permissions. That mismatch is a real security issue because consumers and security tooling may underestimate the capability of the skill and allow shell execution without informed review.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The guide tells users to expose ttyd on an HTTP endpoint and highlights persistence, but gives no warning about authentication, network binding, TLS, or restricting access. A web-accessible terminal can become a direct remote shell into the container, which is especially dangerous in Docker environments that may mount host data or developer secrets.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill instructs users to export API keys directly into the shell environment without discussing secret leakage risks such as shell history, process/environment inspection, persisted sessions, or accidental inclusion in logs and screenshots. In this skill's context, tmux persistence and web-terminal access increase the chance that credentials remain exposed longer than expected.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The guide instructs users to allow Read/Edit/Write/Bash on all paths using wildcards, which effectively removes meaningful safety boundaries for the agent. In the context of a Docker/container setup guide for Claude Code, this is especially risky because users may copy-paste the configuration and then run arbitrary prompts or untrusted project instructions with full filesystem and shell access.

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: The guide explicitly advertises access via `http://YOUR_IP:6080` after showing `ttyd -p 6080 -W`, which exposes a writable remote shell over plain HTTP with no authentication or authorization controls described. In this skill context, that is especially dangerous because ttyd provides terminal access into a Docker/container environment, so anyone who can reach the port may be able to execute commands, access secrets, pivot further, or take over the container.

Session Persistence

Medium

• Category: Rogue Agent

Content

在 Docker 容器中，将配置目录映射到持久化存储：

```bash
# Create persistent directories / 创建持久化目录
mkdir -p ~/workspace/claude-code/.claude
mkdir -p ~/workspace/.acpx
mkdir -p ~/workspace/.gradle  # For Android projects

• Confidence: 86% confidence
• Finding: Create persistent directories / 创建持久化目录 mkdir -p ~/workspace/claude-code/.claude mkdir -p ~/workspace/.acpx mkdir -p ~/workspace/.gradle # For Android projects # Create symlinks / 创建符号链接 ln -sf ~/wo

External Script Fetching

Low

• Category: Supply Chain

Content

```bash
# Install Node.js if needed / 如需要先安装 Node.js
curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
apt-get install -y nodejs

# Install Claude Code / 安装 Claude Code

• Confidence: 89% confidence
• Finding: curl -fsSL https://deb.nodesource.com/setup_20.x | bash

External Script Fetching

Low

• Category: Supply Chain

Content

# Check Node.js
if ! command -v node &> /dev/null; then
    echo "Installing Node.js..."
    curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
    apt-get install -y nodejs
fi

• Confidence: 96% confidence
• Finding: curl -fsSL https://deb.nodesource.com/setup_20.x | bash

VirusTotal

59/59 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.