create-docker-mcp-tunnel

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local shell commands to facilitate environment setup, including directory creation, Docker Compose lifecycle management, and OpenSSL certificate generation.
  • [EXTERNAL_DOWNLOADS]: Fetches official container images from Anthropic's public registry (us-docker.pkg.dev/anthropic-public-registry) and Cloudflare (cloudflare/cloudflared), ensuring dependencies originate from trusted sources.
  • [DYNAMIC_EXECUTION]: Generates a boilerplate Python script (hello_server.py) and configuration files (mcp-proxy.yaml, docker-compose.yaml) at runtime to scaffold the tunnel infrastructure.
  • [SAFE]: Implements strong security hygiene for credential management by explicitly instructing the user to store secrets in a local .env file instead of the chat transcript, applying restrictive file permissions (chmod 600), and utilizing .gitignore to prevent accidental exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 10:57 AM