pty-mcp — security audit

Risk flags

• Shell execution exposed

  This server can run arbitrary shell commands when invoked by an LLM. Audit prompt injection vectors before exposing it to untrusted text.

• Community-authored

  Maintained by qododavid. Confirm the repo and signing before installing.

Capability surface

• Shell execution

  High risk

  Executes arbitrary shell commands. Treat as remote code execution if exposed.

  Evidence: terminal

Trust signals

Total trust score is the sum of these contributions. Each signal carries a fixed weight.

• Verified by Loadout

  +0 / 20

  Not in our manually-verified set yet.

• Official author

  +0 / 15

  Maintained by community contributors.

• Community traction

  +0 / 20

  No star data available.

• Public source

  +15 / 15

  Source is publicly auditable.

• Stability

  +0 / 15

  Stability not yet assessed.

• Capability surface

  +10 / 15

  1 high-risk capability detected.