What security controls does Lilith Shell have?
The current implementation has no command allowlist, no denylist, no environment filtering, no output sanitization, and no audit log. It uses `shell=True` with untrusted tool input.
@charles-adedotun
基本情報
An MCP (Model Context Protocol) server that enables AI assistants to execute terminal commands securely.
以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。
{
"mcpServers": {
"Lilith-Shell": {
"command": "python3",
"args": [
"-m",
"venv",
"venv"
]
}
}
}ツール一覧はまだありません
この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。
ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。
Lilith Shell is an experimental MCP server that exposes local shell command execution to an AI assistant. It is a prototype intended for development and testing, not for production use.
Install from source using pip install -e ".[dev]" after cloning the repository, then run the MCP server in your AI assistant client. The server registers one tool, execute_command, which accepts a command string and an optional directory string (defaults to ~).
execute_commandsubprocess.run(..., shell=True)The current implementation has no command allowlist, no denylist, no environment filtering, no output sanitization, and no audit log. It uses `shell=True` with untrusted tool input.
No. The README warns against running it on any host, account, or directory containing credentials, production data, private source code, SSH keys, or cloud tokens. It is strictly a prototype.
The README does not specify supported platforms beyond general Python execution. No Windows-specific execution path is implemented.
Use `pip install -e ".[dev]"` to install in development mode, then run `pytest` to execute tests.
Capabilities like command allowlisting, dangerous command detection, configurable modes, output sanitization, audit logging, working-directory confinement, cross-platform shell selection, and streaming output are not present in the current code.
Console, Backend and CLI to manage Capgo Instant update and Native build for Capacitor apps Build and upload to app store your mobile app

The tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac
Modelglass turns "which model should I use?" into a lookup instead of a guess. Seven tools give your agent live pricing across image, language, video, and audio models. Sourced and versioned, not scraped once and forgott

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.
コメント