Personal Docker Manager

• Analyzed: May 12, 2026, 3:12 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1c93cce3c97f1ac3ab140f800d9818222c6ae7cecaeb821d1d0e5c8c20b3eb10
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill describes an API for comprehensive Docker management, which includes several high-risk capabilities. Specifically, the API allows for arbitrary command execution within Docker containers via `/containers/{id}/exec`, deployment of arbitrary Docker Compose files via `/stacks` (using `composeContent`), and full management of user accounts (including roles) and API keys via `/users` and `/apikeys` endpoints. While these capabilities are aligned with the stated purpose of a Docker management platform, they grant significant power that could be abused by a malicious user through prompt injection against the AI agent, leading to remote code execution, privilege escalation, or persistent access to the Docker environment.