Skip to content

Conversation

@domdomegg
Copy link
Member

Summary

  • Add comprehensive security warnings to the Argument type in server.schema.json
  • Warn about command injection risks from user-provided input in arguments
  • Include concrete example of malicious payload (;rm -rf ~/Development)
  • Recommend non-shell execution methods and user consent for safer command execution

Fixes #41

Add comprehensive security guidance to the Argument type in server.schema.json
to warn about command injection risks from user-provided input. Includes example
of malicious payload and recommendations for non-shell execution methods.

Fixes #41
@domdomegg domdomegg merged commit be6c2d9 into main Sep 8, 2025
7 checks passed
@domdomegg domdomegg deleted the adamj/add-argument-security-warnings branch September 8, 2025 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Provide clear guidance on avoiding security problems with template type package arguments

4 participants