v1.1.6

Security

• Reject persistent git config invocations that can store executable Git configuration.
• Apply existing hardened policies to common alternate command names such as gawk, gfind, gtar, and bsdtar.
• Reject command-wrapper and shell-escape tools such as timeout, nice, nohup, setsid, stdbuf, flock, less, vim, and ssh by default.
• Document that command hardening is best-effort defense in depth, not a complete sandbox.

PyPI: https://pypi.org/project/mcp-shell-server/1.1.6/