# Security

`pi-docker` controls the Docker daemon available to the current user. Docker daemon access is highly privileged and may permit host filesystem or network changes.

- Review tool calls before approving destructive or unrestricted actions.
- Do not expose the Docker socket over an unauthenticated network connection.
- Do not pass passwords, API keys, or registry tokens through model-visible tool arguments.
- Use interactive `registry_login`, environment files, Docker secrets, or BuildKit secret mounts instead.
- Mount untrusted repositories read-only, drop capabilities, disable networking when possible, and use one disposable container per independent PoC.

Report vulnerabilities privately through GitHub's security advisory form for this repository.