Shell Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Shell Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP server that gives AI agents shell access. Provides a run_command tool for executing shell commands and returning stdout, stderr, and exit code.
Supports Streamable HTTP, SSE, and stdio transports.
npx @supercorp/shell-mcpThis starts an HTTP server on port 8000.
npx @supercorp/shell-mcp --port 3000npx @supercorp/shell-mcp --transport sse --port 3000npx @supercorp/shell-mcp --transport stdio| Flag | Default | Description |
|---|---|---|
--port | 8000 | Port to listen on (HTTP and SSE transports) |
--transport | http | Transport type: http, sse, or stdio |
--workdir | . | Default working directory for commands |
run_commandExecute a shell command.
Parameters:
| Name | Type | Required | Description |
|---|---|---|---|
command | string | Yes | The shell command to run |
workdir | string | No | Working directory (overrides --workdir) |
Response:
{
"stdout": "hello world\n",
"stderr": "",
"exitCode": 0
}Commands have a 60-second timeout and 10 MB output buffer.
{
"mcpServers": {
"shell": {
"command": "npx",
"args": ["-y", "@supercorp/shell-mcp", "--transport", "stdio"]
}
}
}{
"mcpServers": {
"shell": {
"url": "http://localhost:8000/"
}
}
}ISC
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.