fastmcp-stdio-proxy
Fail
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: HIGHCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs users to mount the host's Docker socket (
/var/run/docker.sock) into a container. This is a high-risk practice because any process with access to the Docker socket can execute commands as root on the host machine, effectively bypassing all container isolation. - [COMMAND_EXECUTION]: The instructions suggest using the Docker CLI within the container to launch peer servers via
docker run -i --rm <target-image>. This dynamic command construction is vulnerable to command injection if the target image name or arguments are influenced by untrusted external data. - [COMMAND_EXECUTION]: Ingestion points: The
<target-image>variable in the suggested Python router logic. Boundary markers: None present. Capability inventory: Access to the host Docker engine via/var/run/docker.sock. Sanitization: None mentioned to prevent shell injection or malicious image selection.
Recommendations
- AI detected serious security threats
Audit Metadata