mcp-stdio-shellguard
esm
Defense-in-depth bundle for MCP stdio servers: drop-in guard for child_process.exec/spawn, AST audit CLI for unsanitized shell calls, and a reference MCP server that exposes both. Closes the Ox-Security 200k-server stdio-RCE class.
Version 0.1.2 License MIT
Keywords
mcpmodel-context-protocolsecurityshell-injectionrcestdioauditsandboxallowlistchild_processdefensive-security
INSTALL