Dockerfile Generator Ai MCP Server

This MCP server has critical security issues that prevent approval. The code includes a hardcoded path to an external shared authentication module (`~/clawd/meok-labs-engine/shared`) with no verification of its contents or integrity, creating a significant supply-chain and code-injection risk. Additionally, the server implements a client-side rate-limiting mechanism that can be trivially bypassed, provides no actual authentication validation (the external `check_access()` function is opaque), and lacks input validation on critical parameters. The rate-limiting design stores state in memory without persistence, making it ineffective. These issues, combined with the dependency on an unverifiable external auth system, make this server unsafe for production use. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.