rescreenshot-mcp

The server demonstrates strong security practices for its context. Sensitive Wayland restore tokens are encrypted using ChaCha20-Poly1305 with HKDF-SHA256 and stored in a keyring or an encrypted file with appropriate permissions. Regex pattern matching includes size and DFA limits to prevent ReDoS attacks. All necessary unsafe blocks for OS interaction (Win32 API) include explicit comments and buffer handling. The project actively tracks and manages dependency vulnerabilities. Communication is strictly via stdio JSON-RPC, limiting network attack surface. Known inherent security limitations of the X11 protocol (no consent for capture) are clearly documented rather than introduced by the application.