Dockerfile Generator
Generate optimized Dockerfile for any project
3 security findings detected
LOW Tool Misuse · Tool Parameter Abuse 15% confidence
Match: rm -rf /
Line 50
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
WORKDIR /app
RUN apt-get update && apt-get install -y --no-install-recommends \
gcc \
&& rm -rf /var/lib/apt/lists/*
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY . .
Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
LOW Tool Misuse · Tool Parameter Abuse 15% confidence
Match: rm -rf /var/lib/apt/lists/
Line 50
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
WORKDIR /app
RUN apt-get update && apt-get install -y --no-install-recommends \
gcc \
&& rm -rf /var/lib/apt/lists/*
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY . .
Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
LOW Tool Misuse · Chaining Abuse 15% confidence
Match: && rm -
Line 50
Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.
WORKDIR /app
RUN apt-get update && apt-get install -y --no-install-recommends \
gcc \
&& rm -rf /var/lib/apt/lists/*
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY . .
Limit tool chaining depth and validate the output of each tool before passing it to the next. Require explicit user approval for multi-step chains.