{"name":"io.studiomeyer/stdio-shellguard","slug":"studiomeyer-stdio-shellguard","title":"MCP stdio ShellGuard","description":"Defense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking.","url":"https://mcp.market/server/studiomeyer-stdio-shellguard","rating":null,"grade":"C","score":60,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":27,"stars":0,"forks":0,"downloads_week":263,"last_push_at":"2026-11-01T21:41:46.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/studiomeyer-io/mcp-stdio-shellguard","website":null,"version":"0.1.3","remotes":[],"packages":[{"registryType":"npm","identifier":"mcp-stdio-shellguard","version":"0.1.3","transport":{"type":"stdio"}}],"tools":[{"name":"audit_report","description":"Format an AuditScanResult as markdown / json / sarif. Pure pass-through transformer.","write_action":false,"price_micros":0,"input_schema":null},{"name":"audit_source","description":"Scan a TypeScript / JavaScript path for unsanitised child_process.exec / spawn /","write_action":false,"price_micros":0,"input_schema":null},{"name":"guard_exec","description":"Defended replacement for child_process.exec. Forces an args[] vector,","write_action":false,"price_micros":0,"input_schema":null},{"name":"guard_spawn","description":"Defended replacement for child_process.spawn. Returns stdout/stderr SHA-256 hashes","write_action":false,"price_micros":0,"input_schema":null},{"name":"register_allowlist","description":"Register a tool name with its allowed executable + args regex patterns.","write_action":false,"price_micros":0,"input_schema":null},{"name":"replay_check","description":"Compute the canonical SHA-256 hash for an invocation and report whether the same","write_action":false,"price_micros":0,"input_schema":null},{"name":"sandbox_status","description":"Report the active sandbox profile + concrete limits (timeout, byte caps, fd budget,","write_action":false,"price_micros":0,"input_schema":null},{"name":"trust_tier","description":"Derive the LOW / MEDIUM / HIGH / CRITICAL trust tier for a registered tool plus","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":60,"grade":"C","scanned_at":"2026-11-02T21:55:08.972Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-11-02T21:55:08.874Z","components":{"code":{"score":8,"max":25,"notes":["36 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":4,"max":10,"notes":["namespace and repository owner differ"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/audit/bindings.js: …import cp from \"node:child_process\"; cp.exec(`ls ${x}`)` * via a default/namespace im…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/audit/patterns.js: … severity: \"CRITICAL\", label: \"eval(...)\", test: ({ callee }) => cal…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"mcp-stdio-shellguard","version":"0.1.3","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":8,"publishedAt":"2026-11-01T21:26:14.243Z","repositoryUrl":"git+https://github.com/studiomeyer-io/mcp-stdio-shellguard.git","weeklyDownloads":263}],"repo":{"found":true,"owner":"studiomeyer-io","repo":"mcp-stdio-shellguard","archived":false,"pushedAt":"2026-11-01T21:41:46Z","stars":0,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/267274902?v=4","ownerCreatedAt":"2026-03-11T08:17:53Z","license":"MIT"},"icon":{"url":"https://studiomeyer.io/favicon-512.png","source":"registry","width":512,"height":512},"presence":{"stars":0,"forks":0,"downloadsWeek":263,"license":"MIT","lastPushAt":"2026-11-01T21:41:46.000Z","score":27}}}},"grade_history":[],"reviews":[]}