Docker Container Rerun

• Analyzed: Mar 25, 2026, 5:37 PM
• Findings: 1
• Version: 1.0.0
• Hash: cad8e640a5833e94b520454fa962d279ea02a6131d468bf6ef6fd54ed7442811
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains a Python script (scripts/update_docker_run_container.py) that executes a user-provided string via subprocess.run(shell=True). While the script attempts to validate that the command starts with 'docker run', this check is insufficient to prevent shell injection (e.g., via command chaining or subshells). This represents a critical security vulnerability that allows for arbitrary code execution on the host, although it appears to be a design flaw rather than an intentional backdoor, as the behavior aligns with the stated purpose of recreating Docker containers.