podman-mcp-server

The server's primary function is to wrap and execute Podman/Docker CLI commands based on incoming requests. While Go's `os/exec.Command` prevents direct shell injection by not invoking a shell, arguments (such as `imageName`, `name`, `containerFile`, `environment` variables) are passed directly to the `podman` executable without explicit content sanitization by the server. This exposes a risk of 'argument injection' or exploitation of potential vulnerabilities within the `podman` or `docker` CLI itself if malicious or malformed inputs are provided. As the server allows powerful operations like running, stopping, and removing containers/images, exposing it to untrusted input sources (e.g., over HTTP without strong authentication/authorization) could lead to destructive actions on the host system. The server does not contain obvious malicious patterns or hardcoded secrets.