mcp-kali-server

This project is inherently high-risk by design, as it provides access to powerful penetration testing tools through a privileged Docker container with host network mode. The `custom_command` tool allows arbitrary command execution within this privileged container. While the project is highly transparent about these risks in its documentation (README, SECURITY.md, CLAUDE.md) and provides warnings, deploying or using it requires explicit authorization, deep understanding of its implications, and strict adherence to ethical and legal guidelines to prevent misuse. There are no observed 'eval' or obfuscation patterns, nor hardcoded runtime secrets, but the core functionality is a security tool with inherent dangers.