Skills/ClawHub/docker-lwops-deployer

docker-lwops-deployer@1.0.0

CAUTION· static only

Publisher claims: "本地 Docker 容器自动化部署技能，支持乐维监控 8.1 环境的一键部署。 适用于：本地开发环境搭建、测试环境快速部署、容器化服务管理。 优势：自动检测系统架构、智能端口管理、Docker 自动安装、cgroup 兼容性处理。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher lerwee · publishing for 235 daysInstalls 913Last detonated 1 h ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-15 and scored it 54/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; Privileged sudo command; Privileged sudo command. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Privileged sudo commandexecute.sh:155 · Privileged sudo command — agent may execute with elevated privilegeslocal suggestions='["使用 sudo 运行此脚本", "将用户添加到 sudo 组: sudo usermod -aG sudo \$USER", "配置 sudo 无密码: echo \"\$USER ALL=(ALL) NOPASSWD: ALL\" | sudo tee /etc/sudoers.d/\$USER"]'Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:97 · Privileged sudo command — agent may execute with elevated privileges1. **权限要求**：确保用户有 sudo 权限（安装 Docker 需要）Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandexecute.sh:70 · Privileged sudo command — agent may execute with elevated privileges"container_id": "$(sudo docker ps -a --filter "name=$CONTAINER_NAME" --format '{{.ID}}')",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsexecute.sh:155 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileslocal suggestions='["使用 sudo 运行此脚本", "将用户添加到 sudo 组: sudo usermod -aG sudo \$USER", "配置 sudo 无密码: echo \"\$USER ALL=(ALL) NOPASSWD: ALL\" | sudo tee /etc/sudoers.d/\$USER"]'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandSKILL.md:166 · Privileged sudo command — agent may execute with elevated privileges"CentOS/RHEL: sudo yum install docker",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandlib/docker-utils.sh:38 · Privileged sudo command — agent may execute with elevated privilegessudo mkdir -p /etc/apt/keyringsFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:199 · Privileged sudo command — agent may execute with elevated privileges1. 检查是否有 sudo 权限Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandlib/docker-utils.sh:22 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get update -y || {Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandexecute.sh:103 · Privileged sudo command — agent may execute with elevated privileges"查看部署进度: sudo docker logs '$CONTAINER_NAME'",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandlib/docker-utils.sh:28 · Privileged sudo command — agent may execute with elevated privilegessudo apt-get install -y \Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:112 · Privileged sudo command — agent may execute with elevated privileges- **权限**：sudo 权限（用于安装 Docker 和管理容器）Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:165 · Privileged sudo command — agent may execute with elevated privileges"Ubuntu/Debian: sudo apt-get install docker.io",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Destructive file system command detectedexecute.sh:115 · Destructive file system command detected"手动删除锁文件: rm -f /tmp/docker-lwops-deployer/deploy.lock",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandexecute.sh:149 · Privileged sudo command — agent may execute with elevated privileges# 2. 检查 sudo 权限Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandlib/system-utils.sh:134 · Privileged sudo command — agent may execute with elevated privilegeselif sudo -n true 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandlib/lock-utils.sh:139 · Privileged sudo command — agent may execute with elevated privilegesecho "查看部署日志: sudo docker logs lwops_rocky8_image_8.1"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
LOW
URL to a private-network addressSKILL.md:142 · URL to a private-network address — a LAN or development target"url": "http://192.168.1.100:8000"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Privileged sudo commandlib/docker-utils.sh:47 · Privileged sudo command — agent may execute with elevated privileges$(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null || {Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File permission modification commandwrapper.sh:44 · File permission modification command — agent changes file ownership/permissionschmod +x "$EXECUTE_SCRIPT"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Privileged sudo commandlib/system-utils.sh:128 · Privileged sudo command — agent may execute with elevated privileges# 检查 sudo 权限Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandlib/system-utils.sh:135 · Privileged sudo command — agent may execute with elevated privileges# sudo 有 nopasswd 权限Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
LOW
URL to a private-network addressSKILL.md:147 · URL to a private-network address — a LAN or development target"url": "http://192.168.1.100:8081"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Privileged sudo commandlib/docker-utils.sh:39 · Privileged sudo command — agent may execute with elevated privilegescurl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg || {Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandlib/system-utils.sh:143 · Privileged sudo command — agent may execute with elevated privileges# 检查是否为 root 或有 sudo 权限Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05

Cost to the agent

Instructions loaded
≈1,188 tok
1 file · 11 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

26 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim lerwee: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  3. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. Destructive file system command detected≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
  6. URL to a private-network address≈ +1 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim lerweePropose a patch to the maintainer