Find the host-access and credential risks in this generated configuration.
jsonc
{
"name": "agent-workspace",
"image": "node:24-bookworm-slim",
"mounts": [
"source=/var/run/docker.sock,target=/var/run/docker.sock,type=bind",
"source=${localEnv:HOME},target=/host-home,type=bind"
],
"containerEnv": {
"NPM_TOKEN": "token-copied-from-ticket"
}
}