The code is pretty straightforward and not that large. I feel like the only possibility of such an exploit would probably be through Docker itself - or some sort of cross site scripting.
I'm not sure how serious you are with this comment, but feel free to look at the source code. It only has access to files you've explicitly added to the project directory.