MMCP PortalA modern, community-driven collection of Dockerized Model Context Protocol (MCP) servers, tools, and resources.

mcp-so:mcp-portal_ajeetraina

View source

92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

Score

92/100

MEDIUM 1

Findings (1)

MEDIUM

Docker pull and run untrusted image EXTDL_015

external-download L29

Detects pulling and running Docker images from external registries

Docker pull commands

FIX

Pin Docker images to a specific digest (e.g., image@sha256:abc...) instead of using mutable tags like :latest. Use trusted base images from verified publishers.

FP?

Likely FP if the Docker command pulls a well-known official image (e.g., docker pull python:3.11) in setup documentation.