A tool for exploring each layer in a docker image Based on wagoodman/dive (53,557+ GitHub stars). docker analyzer, go, cli, docker, docker-image, explorer, i...

This skill appears to do what it claims: local inspection and simple optimization suggestions for Docker images. Before installing: (1) confirm you are comfortable granting the agent access to the Docker daemon (it will run docker commands and can read image/container metadata and compose files); (2) review the small script (scripts/docker_analyzer.sh) yourself — it is short and readable — to ensure no changes or hidden endpoints; (3) if you plan to run it in a sensitive environment (CI, production hosts with privileged sockets), prefer running it in an isolated environment or as a user without broad Docker privileges; (4) note the metadata omission (required binaries not declared) — expect to have docker and python3 available for the skill to work. If you want higher assurance, request the upstream source or a reproducible build provenance for the implementation.

Type: OpenClaw Skill Name: docker-analyzer Version: 1.0.0 The skill contains a shell-to-python injection vulnerability in scripts/docker_analyzer.sh within the 'optimize' command. The shell variable '$image' is directly interpolated into a Python heredoc without sanitization, allowing for arbitrary code execution if a crafted image name is provided. While the tool's functionality aligns with its stated purpose of Docker image analysis, this lack of input validation represents a significant security flaw.