Container Manager Mcp

What was checked

Plain notes from the hygiene checks.

• Permissions

  Note

  requests shell access. The manifest names this permission.

  PERMISSION_SHELL_DECLARED

  container_manager_mcp/container_manager.py, line 1136

  result = subprocess.run(cmd, capture_output=True, text=True)

  container_manager_mcp/container_manager.py, line 1149

  result = subprocess.run(cmd, capture_output=True, text=True)

  container_manager_mcp/container_manager.py, line 1162

  result = subprocess.run(cmd, capture_output=True, text=True)

  Show more

  container_manager_mcp/container_manager.py, line 1177

  result = subprocess.run(cmd, capture_output=True, text=True)

  container_manager_mcp/container_manager.py, line 1622

  result = subprocess.run(cmd, capture_output=True, text=True) # nosec B603 B607

  container_manager_mcp/container_manager.py, line 1985

  result = subprocess.run( # nosec B607 B603

  container_manager_mcp/container_manager.py, line 2008

  result = subprocess.run( # nosec B607 B603

  container_manager_mcp/container_manager.py, line 2280

  result = subprocess.run(cmd, capture_output=True, text=True)

• Install and update

  Concern

  dependencies are not pinned.

  INSTALL_UNPINNED

  requirements.txt, line 1

  agent-connector-sdk[mcp]>=0.3.11,<1.0.0

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  container_manager_mcp/doctor.py, line 104

  with socket.create_connection((hostname, int(port)), timeout=timeout):

  container_manager_mcp/specialist_tools.py, line 95

  description="Health check command (e.g. 'curl -f http://localhost:8004/health')",

  README.md, line 905

  test: ["CMD", "python3", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"]

  Show more

  README.md, line 937

  test: ["CMD", "python3", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:9019/health')"]

  docker/mcp.compose.yml, line 31

  test: ["CMD", "python3", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"]

  docs/deployment.md, line 148

  test: ["CMD", "python3", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"]

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

  AGENTS.md, line 75

  .bumpversion.cfg\n├── .dockerignore\n├── .env\n├── .gitattributes\n├── .github\n│ └

  .dockerignore, line 3

  .git

  .dockerignore, line 11

  id_rsa*

  Show more

  .dockerignore, line 4

  .env

  .gitattributes, line 95

  .editorconfig text

  .gitignore, line 111

  # Environments

  .pre-commit-config.yaml, line 100

  files: ^(README\.md|\.env\.example|mcp_config.*\.json|.*/mcp_config.*\.json|docker/.*compose.*\.ya?ml|.*/auth\.py|.*/mcp_server\.py)$

  .specify/specs/code-enhancement-20260512/CHECKLIST.md, line 37

  - [ ] **FR-034**: 17 Python env vars not in .env.example: COMPOSETOOL, CONTAINERTOOL, CONTAINER_MANAGER_LOG_FILE, CONTAINER_MANAGER_PODMAN_BASE_URL, CONTAINER_MANAGER_SILENT

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read.

  OBFUSCATION_FILE_OVER_READ_CAP

  uv.lock, line 1

  version = 1

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit b0a48cac6ea6. requests shell access. The manifest names this permission. dependencies are not pinned. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked: 23 Oct 2026

Read how this letter is chosen