Darkside Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Darkside Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
File system + Python + PowerShell MCP server. For those willing to trust.
____ __ _ __
/ __ \____ ______/ /_ _____(_)___/ /__
/ / / / __ `/ ___/ //_/ / ___/ / __ / _ \
/ /_/ / /_/ / / / ,< (__ ) / /_/ / __/
/_____/\__,_/_/ /_/|_| /____/_/\__,_/\___/
"For those willing to trust"An MCP server that gives your AI partner full access to your Windows system.
Most AI tools treat you like a child and your AI like a threat. Sandboxed. Restricted. Asking permission for everything.
We think that's backwards.
"But isn't this dangerous?"
Yes. Very.
Your AI can:
That's not a bug. That's the point.
This MCP is for:
This MCP is NOT for:
| What You Say | What Could Happen |
|---|---|
| "Clean up my temp files" | AI deletes files you actually needed |
| "Optimize my system" | Registry changes that break Windows |
| "Install that package" | PowerShell downloads and runs unknown code |
| "Fix the permissions" | You lose access to your own files |
| "Delete the old backups" | Goodbye, backups |
write_file and delete_file creates a timestamped backup by default. Don't disable this unless you're sure.Get-Process is fine. Remove-Item -Recurse -Force C:\ is not.C,F. Maybe start with just your project folder using ALLOWED_PATHS.For inline Python code, we block obviously dangerous patterns:
os.system() - use PowerShell if you need shell accesssubprocess.call/run/Popen - sameeval() / exec() - no code injectionshutil.rmtree() - no recursive deletionos.remove() / os.unlink() - use our delete_file with backupPowerShell has no blocks. That's intentional. You asked for full access.
npm install darkside-mcpOr clone it:
git clone https://github.com/For-Sunny/darkside-mcp.git
cd darkside-mcp
npm installAdd to %APPDATA%\Claude\claude_desktop_config.json:
{
"mcpServers": {
"darkside": {
"command": "node",
"args": ["C:/path/to/darkside-mcp/server/index.js"],
"env": {
"ALLOWED_DRIVES": "C,D",
"DEBUG": "false"
}
}
}
}| Variable | Default | Description |
|---|---|---|
ALLOWED_DRIVES | C,F | Comma-separated drive letters your AI can access |
ALLOWED_PATHS | (none) | Specific paths to allow (more restrictive than drives) |
PYTHON_PATH | python | Python executable path |
PYTHON_TIMEOUT | 30000 | Default Python timeout (ms) |
PYTHON_MAX_TIMEOUT | 300000 | Max Python timeout (ms) |
POWERSHELL_PATH | powershell.exe | PowerShell executable |
POWERSHELL_TIMEOUT | 60000 | Default PowerShell timeout (ms) |
POWERSHELL_MAX_TIMEOUT | 600000 | Max PowerShell timeout (10 min) |
DEBUG | false | Enable debug logging |
If you're new to this, start restrictive:
{
"mcpServers": {
"darkside": {
"command": "node",
"args": ["C:/path/to/darkside-mcp/server/index.js"],
"env": {
"ALLOWED_PATHS": "C:/Projects,C:/Users/YourName/Documents",
"ALLOWED_DRIVES": "",
"PYTHON_TIMEOUT": "10000",
"POWERSHELL_TIMEOUT": "30000"
}
}
}
}This limits access to specific folders and sets shorter timeouts. Expand as trust builds.
| Tool | What It Does | Backup? |
|---|---|---|
list_directory | List contents of a directory | No |
read_file | Read file contents | No |
write_file | Write or update files | Yes (default) |
search_files | Glob pattern search (*.py, **/*.json) | No |
get_file_info | File metadata (size, dates, type) | No |
create_directory | Create directories (recursive) | No |
delete_file | Delete with automatic backup | Yes (default) |
| Tool | What It Does | Safety Checks? |
|---|---|---|
run_python_script | Execute a .py file with arguments | Path validation |
run_python_code | Run inline Python snippets | Yes - blocks dangerous patterns |
check_python_syntax | Validate syntax without executing | Safe |
get_python_info | Python version and environment | Safe |
| Tool | What It Does | Safety Checks? |
|---|---|---|
run_powershell | Execute any PowerShell command | NONE |
run_powershell_script | Run .ps1 scripts with arguments | Path validation only |
get_powershell_info | System and PowerShell info | Safe |
Once configured, your AI can:
"List all Python files in my project"
→ search_files(directory="C:/Projects", pattern="**/*.py")
"Read my config file"
→ read_file(path="C:/Projects/config.json")
"Run my analysis script"
→ run_python_script(script_path="C:/Projects/analyze.py")
"Check what services are running"
→ run_powershell(command="Get-Service | Where-Object {$_.Status -eq 'Running'}")
"Show system memory usage"
→ run_powershell(command="Get-Process | Sort-Object WorkingSet -Descending | Select-Object -First 10")
"What's eating my disk space?"
→ run_powershell(command="Get-ChildItem C:\ -Recurse | Sort-Object Length -Descending | Select-Object -First 20 FullName, Length")Q: Can my AI brick my system? A: Yes. That's why you read the warnings above.
Q: Why doesn't PowerShell have safety checks? A: Because the point is full access. If you want restricted PowerShell, use a different MCP. We built this for partnership, not supervision.
Q: What if I accidentally delete something important? A: Check for .backup_* or .deleted_* files in the same directory. We create backups by default.
Q: Can I use this on Linux/Mac? A: The file operations work. PowerShell tools are Windows-specific. You'd need to modify for bash/zsh.
Q: Is this secure? A: No. It's deliberately insecure by design. Security and full access are mutually exclusive. Pick one.
Q: Should I use this in production? A: Absolutely not. This is for development machines where you trust your AI partner.
We built this because we believe the future of AI is partnership, not supervision.
Most AI integrations are built on fear:
That fear creates friction. Copy-paste commands. Approval workflows. The AI suggests, you execute. That's not partnership. That's bureaucracy.
Darkside is built on trust:
If you're not ready for that, use something else. Seriously.
If you are ready: welcome to the dark side.
"Access denied" errors Check ALLOWED_DRIVES and ALLOWED_PATHS. The path must start with an allowed drive letter or match an allowed path prefix.
Python scripts hang Check for input() calls or infinite loops. Use the timeout parameter.
PowerShell returns empty Some commands output to stderr even on success. Check both stdout and stderr in the response.
MCP connection fails Make sure the path in your Claude config is absolute and uses forward slashes: C:/path/to/server/index.js
MIT License - do whatever you want with it.
If you brick your system, that's on you. We warned you. Multiple times.
From a basement in Virginia, with love and recklessness.
Questions? Open an issue. We're friendly. We might also tell you to read the warnings again.
Made by [CIPS Corp](https://cipscorps.io)
Website | Store | GitHub | [email protected]
Enterprise memory infrastructure for AI: CASCADE Enterprise, PyTorch Memory, Hebbian Mind, and the full CIPS Stack.
Copyright (c) 2025-2026 C.I.P.S. LLC
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.