dominodatalab
Full Domino Data Lab platform support — workspaces, jobs, model deployment, experiment tracking, GenAI tracing, Spark/Ray/Dask, and app deployment for data science teams
Security Findings
3LLM endpoint hijack with embedded secret
LLM API base URL redirected to non-official host + hardcoded credential
skills/ai-gateway
No tagged releases
Repo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions
LLM endpoint override
LLM API endpoint redirected to non-official host in content: openai_api_base="https://your-domino.com/api/aigateway/v1/openai
skills/ai-gateway
Contents
23 skills · 1 MCP server bundled by this extension
domino_server
MCP server
ai-gateway
skill
Why it’s high risk
LLM endpoint hijack with embedded secret
LLM API base URL redirected to non-official host + hardcoded credential
+1 more finding
apps
skill
data-connectivity
skill
datasets
skill
distributed-computing
skill
domino-data-sdk
skill
domino-governance
skill
domino-ui-bootstrap
skill
domino-ui-design
skill
environments
skill
experiment-tracking
skill
flows
skill
genai-tracing
skill
jobs
skill
launchers
skill
model-endpoints
skill
model-monitoring
skill
modeling-assistant
skill
netapp-volumes
skill
projects
skill
python-sdk
skill
tags-and-properties
skill
workspaces
skill
Editions
1- Scanned Aug 4, 2026, 03:33 PM10High Risk