ssh-mcp 1.0.7 → 1.0.8

package/README.md

@@ -6,9 +6,11 @@
 [![License](https://img.shields.io/github/license/tufantunc/ssh-mcp)](./LICENSE)
 [![GitHub Stars](https://img.shields.io/github/stars/tufantunc/ssh-mcp?style=social)](https://github.com/tufantunc/ssh-mcp/stargazers)
 [![GitHub Forks](https://img.shields.io/github/forks/tufantunc/ssh-mcp?style=social)](https://github.com/tufantunc/ssh-mcp/forks)
-[![Build Status](https://github.com/tufantunc/ssh-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/tufantunc/ssh-mcp/actions)
+[![Build Status](https://github.com/tufantunc/ssh-mcp/actions/workflows/publish.yml/badge.svg)](https://github.com/tufantunc/ssh-mcp/actions)
 [![GitHub issues](https://img.shields.io/github/issues/tufantunc/ssh-mcp)](https://github.com/tufantunc/ssh-mcp/issues)
 
+[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/tufantunc/ssh-mcp)](https://archestra.ai/mcp-catalog/tufantunc__ssh-mcp)
+
 **SSH MCP Server** is a local Model Context Protocol (MCP) server that exposes SSH control for Linux and Windows systems, enabling LLMs and other MCP clients to execute shell commands securely via SSH.
 
 ## Contents

package/build/index.js

@@ -36,6 +36,26 @@ function validateConfig(config) {
     }
 }
 validateConfig(argvConfig);
+// Command sanitization and validation
+function sanitizeCommand(command) {
+    if (typeof command !== 'string') {
+        throw new McpError(ErrorCode.InvalidParams, 'Command must be a string');
+    }
+    const trimmedCommand = command.trim();
+    if (!trimmedCommand) {
+        throw new McpError(ErrorCode.InvalidParams, 'Command cannot be empty');
+    }
+    // Length check
+    if (trimmedCommand.length > 1000) {
+        throw new McpError(ErrorCode.InvalidParams, 'Command is too long (max 1000 characters)');
+    }
+    return trimmedCommand;
+}
+// Escape command for use in shell contexts (like pkill)
+function escapeCommandForShell(command) {
+    // Replace single quotes with escaped single quotes
+    return command.replace(/'/g, "'\"'\"'");
+}
 const server = new McpServer({
     name: 'SSH MCP Server',
     version: '1.0.7',
@@ -48,9 +68,7 @@ server.tool("exec", "Execute a shell command on the remote SSH server and return
     command: z.string().describe("Shell command to execute on the remote SSH server"),
 }, async ({ command }) => {
     // Sanitize command input
-    if (typeof command !== 'string' || !command.trim()) {
-        throw new McpError(ErrorCode.InternalError, 'Command must be a non-empty string.');
-    }
+    const sanitizedCommand = sanitizeCommand(command);
     const sshConfig = {
         host: HOST,
         port: PORT,
@@ -64,7 +82,7 @@ server.tool("exec", "Execute a shell command on the remote SSH server and return
             const fs = await import('fs/promises');
             sshConfig.privateKey = await fs.readFile(KEY, 'utf8');
         }
-        const result = await execSshCommand(sshConfig, command);
+        const result = await execSshCommand(sshConfig, sanitizedCommand);
         return result;
     }
     catch (err) {
@@ -88,7 +106,7 @@ async function execSshCommand(sshConfig, command) {
                     // If abort command itself times out, force close connection
                     conn.end();
                 }, 5000); // 5 second timeout for abort command
-                conn.exec('timeout 3s pkill -f "' + command + '" 2>/dev/null || true', (err, abortStream) => {
+                conn.exec('timeout 3s pkill -f \'' + escapeCommandForShell(command) + '\' 2>/dev/null || true', (err, abortStream) => {
                     if (abortStream) {
                         abortStream.on('close', () => {
                             clearTimeout(abortTimeout);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ssh-mcp",
   "license": "MIT",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "MCP server exposing SSH control for Linux and Windows systems via Model Context Protocol.",
   "type": "module",
   "bin": {
@@ -16,15 +16,15 @@
     "build"
   ],
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.10.2",
-    "ssh2": "^1.11.0",
-    "zod": "^3.24.3"
+    "@modelcontextprotocol/sdk": "^1.17.5",
+    "ssh2": "^1.17.0",
+    "zod": "^4.1.5"
   },
   "devDependencies": {
-    "@types/node": "^20.17.31",
+    "@types/node": "^24.3.0",
     "@types/ssh2": "^1.15.5",
     "shx": "^0.4.0",
-    "typescript": "^5.4.5"
+    "typescript": "^5.9.2"
   },
   "homepage": "https://github.com/tufantunc/ssh-mcp#readme",
   "repository": {