High Risk

    dominodatalab

    Full Domino Data Lab platform support — workspaces, jobs, model deployment, experiment tracking, GenAI tracing, Spark/Ray/Dask, and app deployment for data science teams

    Manifest10
    Lineage94
    Safety10
    Rank#2540
    dominodatalabclaudeplugins333Last scanned Aug 4, 2026, 03:33 PManthropics/claude-plugins-official, anthropics/claude-plugins-communityhttps://github.com/dominodatalab/domino-claude-plugin

    Security Findings

    3

    LLM endpoint hijack with embedded secret

    LLM API base URL redirected to non-official host + hardcoded credential

    skills/ai-gateway

    No tagged releases

    Repo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions

    LLM endpoint override

    LLM API endpoint redirected to non-official host in content: openai_api_base="https://your-domino.com/api/aigateway/v1/openai

    skills/ai-gateway

    Contents

    23 skills · 1 MCP server bundled by this extension

    1 high risk22 clean1 unscanned

    domino_server

    MCP server

    .mcp.json

    ai-gateway

    skill

    10
    High Risk
    skills/ai-gateway98e7abadecfb

    Why it’s high risk

    LLM endpoint hijack with embedded secret

    LLM API base URL redirected to non-official host + hardcoded credential

    +1 more finding

    Open full security report

    apps

    skill

    100
    Clean
    skills/appsedc1f08dafea

    data-connectivity

    skill

    100
    Clean
    skills/data-connectivity4735f4143186

    datasets

    skill

    100
    Clean
    skills/datasets12d1b5b5643e

    distributed-computing

    skill

    100
    Clean
    skills/distributed-computing16e69600060b

    domino-data-sdk

    skill

    100
    Clean
    skills/domino-data-sdkcc2bd42afa83

    domino-governance

    skill

    100
    Clean
    skills/domino-governance61edad59e178

    domino-ui-bootstrap

    skill

    90
    Clean
    skills/domino-ui-bootstrap4349cacb5e5f

    domino-ui-design

    skill

    90
    Clean
    skills/domino-ui-designf5a6990b6ed2

    environments

    skill

    100
    Clean
    skills/environments52bfb3769c3c

    experiment-tracking

    skill

    100
    Clean
    skills/experiment-tracking744e9afc2b63

    flows

    skill

    100
    Clean
    skills/flows3aa428f3a5aa

    genai-tracing

    skill

    100
    Clean
    skills/genai-tracingd1d95e799ec4

    jobs

    skill

    100
    Clean
    skills/jobs6d6b98ec3e08

    launchers

    skill

    100
    Clean
    skills/launchersbde23b46064d

    model-endpoints

    skill

    100
    Clean
    skills/model-endpoints7312af32331c

    model-monitoring

    skill

    100
    Clean
    skills/model-monitoring6683ffe18d3c

    modeling-assistant

    skill

    100
    Clean
    skills/modeling-assistant1dcacfaac1ea

    netapp-volumes

    skill

    100
    Clean
    skills/netapp-volumes74e81bceb7b7

    projects

    skill

    100
    Clean
    skills/projects3f4e28a3a569

    python-sdk

    skill

    100
    Clean
    skills/python-sdk61dbe652c127

    tags-and-properties

    skill

    100
    Clean
    skills/tags-and-properties02b82f68683b

    workspaces

    skill

    100
    Clean
    skills/workspacesc1d94c873dbc

    Editions

    1
    • Scanned Aug 4, 2026, 03:33 PM10
      High Risk