mcp-ssh-session

The server implements several security measures including running as a non-root user in Docker, read-only mounting of SSH keys/config, output/file size limiting to prevent memory exhaustion, and using base64 for file content during `sudo tee` operations to mitigate shell injection risks. It also explicitly mentions and has fixed a prompt injection vulnerability. However, it uses Paramiko's `AutoAddPolicy` for host keys, which automatically accepts new host keys. While convenient for automation, this bypasses strict host key verification and can be susceptible to MITM attacks if the initial connection is compromised. This is a known trade-off clearly stated in the documentation.