npu-docker-launcher

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
references/examples.md

No clear malicious behavior is present. The code is a set of container-launch examples, but several configurations are high risk because they use privileged containers, host networking, broad writable host mounts, and direct driver/toolkit exposure. Unquoted variables and the incorrect USE_PRIVILEGED command pattern should be fixed before use. Pin images by trusted digest, use least-privilege device mappings, restrict mounts to read-only where possible, quote variables, and construct each Docker option as a separate array element.

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Sep 16, 2026, 02:35 PM
Package URL
pkg:socket/skills-sh/ascend-ai-coding%2Fawesome-ascend-skills%2Fnpu-docker-launcher%2F@4c4eba033a2e3dc24b10ee4af4625a47ff663a763a517a87be35b2424005854b