mcp-server-terminal

The project demonstrates a strong focus on security, explicitly addressing common vulnerabilities in `SECURITY.md`. It utilizes memory-safe Rust, employs a command whitelist feature to restrict execution, and uses `portable-pty`'s `CommandBuilder` to prevent command injection. Tmux input is sent via hex mode for reliability and security. The `cli.js` wrapper auto-updates the binary from GitHub Releases, which is a standard distribution method but means users are always running the latest version, implying trust in GitHub's release process and the project maintainers. Visual mode and session recordings have clear security considerations outlined, such as potential exposure of terminal content in untrusted environments.