vibe-kanban

Warn

Audited by Socket on Nov 6, 2026

1 alert found:

Anomaly
AnomalyLOW
templates/docker-compose.yml

This Compose file deploys Vibe Kanban behind Nginx and shows no direct malicious behavior. The principal security concern is mounting /var/run/docker.sock into the application container, which can provide host-level control if that container is compromised or its access is exposed. Remote mode, published MCP/application ports, and the mutable latest image tag also merit review; severity is elevated by the Docker socket exposure.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Nov 6, 2026, 09:11 AM
Package URL
pkg:socket/skills-sh/akillness%2Foh-my-unity3d%2Fvibe-kanban%2F@bbc4672fe4f86fafbb123a762d0632ce36097b7131dbc9ccf1f8868b7659edd8