Back to Home
douglas-gibbons icon

redwood

by douglas-gibbons

Overview

Provides a toolkit of helper functions for AI agents, enabling them to interact with the system via command execution, web scraping, and persistent data storage.

Installation

Run Command
./server.sh

Security Notes

The `run_command` tool uses `subprocess.run(command, shell=True)`, which is a critical security vulnerability allowing for arbitrary command injection. This tool, if exposed to an untrusted agent or user, can lead to full system compromise. While the `mcp_client` prompts the user for execution by default for this server, this prompt can be overridden, and the underlying `shell=True` remains an inherent risk. The `web_scraper` tool could potentially be used for SSRF if the URL input is not adequately validated by the agent.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassHigh
Avg Tokens2500
Stars0
Forks0
Last Update2025-12-06

Tags

AgentToolsCommand ExecutionWeb ScrapingStorage