Docker Ctl

PassAudited by ClawScan on May 1, 2026.

Overview

This is a narrow, read-only container inspection skill, with minor notes that it can read container logs/metadata and references a docker-ctl command that the artifacts do not install.

Install this only if you want the agent to inspect local Podman containers. Be careful with container logs and inspect output because they can contain sensitive operational data, and verify the `docker-ctl` command source before relying on it.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used on sensitive containers, the agent may display logs or inspect data that include secrets, internal hostnames, tokens, or operational details.

Why it was flagged

The skill gives the agent commands to read local container logs and metadata. This is expected for the stated purpose, but such output may include sensitive runtime details or environment configuration.

Skill content
# View container logs
docker-ctl logs <container>

# Inspect a container
docker-ctl inspect <container>
Recommendation

Use it only for containers you are comfortable inspecting, and review log/inspect output before sharing it elsewhere.

What this means

The documented command may fail, or could resolve to a separate local command not provided by this skill.

Why it was flagged

The metadata requires podman and declares no install step, while the documented examples invoke `docker-ctl`. That command's source is not established by the supplied artifacts.

Skill content
"requires": { "bins": ["podman"] },
"install": []
...
docker-ctl ps
Recommendation

Confirm what `docker-ctl` resolves to in your environment, or prefer explicit trusted podman commands for container inspection.