Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Security audit
docker-essentials
Security checks for vulnerabilities and agentic risk
Overview
This is a straightforward Docker command reference, but users should be careful with cleanup commands, bind mounts, and floating image tags.
Install only if you want a Docker command cheat sheet. Before copying commands, review any image tags, avoid floating tags for production, and be especially careful with docker rm, docker prune, docker system prune --volumes, and bind mounts because they can delete Docker resources or expose host files.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (15)
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 75% confidence
- Finding
- Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Missing User Warnings
Medium
- Confidence
- 93% confidence
- Finding
- The removal and prune commands for containers are presented as routine operations without warning about irreversible deletion or the possibility of removing needed stopped containers. In reference material, omission of caution around destructive commands can lead to accidental operational damage, especially for less experienced users.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 90% confidence
- Finding
- Using `docker pull nginx:latest` explicitly recommends a floating tag, which can silently change over time and undermine reproducibility and supply-chain review. In a skill meant to teach operational commands, this may lead users to deploy unreviewed image updates unexpectedly.
Missing User Warnings
Medium
- Confidence
- 96% confidence
- Finding
- The skill lists destructive cleanup commands such as `docker system prune`, `docker system prune -a`, and `docker system prune --volumes` without warning that they can permanently remove containers, networks, images, caches, and volumes. In a quick-reference skill, users may copy-paste these commands and unintentionally cause service disruption or data loss.
Missing User Warnings
Low
- Confidence
- 88% confidence
- Finding
- Mounting an arbitrary host path into a container without any caution can expose sensitive host files or allow the containerized process to modify host data. In Docker documentation, this is contextually relevant because users often copy examples directly and may substitute risky host paths.
Static analysis
No suspicious patterns detected.