claude-desktop-skills-proxy

The server demonstrates robust security considerations. It explicitly blocks common SSRF targets (localhost, private IPs, AWS metadata endpoint) and dangerous CLI commands (rm, sudo, chmod, package managers like apt/brew). It uses `spawn()` instead of `exec()` for CLI execution, preventing shell injection, and validates arguments against dangerous shell operators. Sensitive file paths (e.g., ~/.ssh, /etc/shadow) are blocklisted for reading and serving. An explicit approval flow is required for new domains and commands, adding a layer of user consent. Rate limiting is implemented to prevent abuse. The main external dependency, `cloudflared` for public tunnels, is checked for installation, but its inherent security is external to this codebase. Overall, the project prioritizes security given its function of extending system access.