Docker Helper Ai MCP Server

This MCP server has critical security vulnerabilities stemming from a dangerous external dependency on an unverified authentication middleware module. The server imports `auth_middleware` from a hardcoded user home directory path (`~/clawd/meok-labs-engine/shared`), which is neither included in the repository nor inspected. This pattern enables potential code injection and privilege escalation. Additionally, the server implements weak rate limiting, exposes all tools with no granular access control, and lacks input validation on Dockerfile parsing operations that could be exploited. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.