dsh-docker

In containerized operations, directly handling Docker commands can pose security risks like command injection. The dsh-docker plugin addresses this by securely invoking the Docker CLI via subprocess calls, providing reliable container management for DSH agents with no shell injection vulnerabilities. It offers six core tools for listing containers and images, viewing logs, inspecting details, executing commands inside containers, and managing container lifecycle (e.g., start, stop). Notably, docker_exec features approval gates by default and strict container name validation, combined with timeout and log capping, to enhance security. This plugin is ideal for operations engineers, developers, or AI agents needing to safely manage Docker resources in automation scenarios, especially in security-sensitive environments.