ascend-docker

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/run-ascend-container.sh

No clear malicious behavior or embedded malware is present. The script is a functional Ascend NPU Docker launcher, but it presents a significant container-isolation risk by defaulting to --privileged and mounting host resources, including /home and system directories. Unquoted user-controlled variables and insufficient device-list validation can cause unintended Docker argument injection or malformed mappings. Use only with trusted local inputs and review whether privileged mode and writable host mounts are necessary.

Confidence: 98%Severity: 82%
Audit Metadata
Analyzed At
Sep 19, 2026, 07:13 PM
Package URL
pkg:socket/skills-sh/ascend-ai-coding%2Fawesome-ascend-skills%2Fascend-docker%2F@d2a2d87d6382d6481a5f9f813ac10e779c6d4940b0a8ce4272be92d2de13f58d