sift-releases

The core 'sift' binary, which functions as the MCP server, is proprietary and distributed as a binary only. This prevents a full security audit of its C source code. While the Python installer scripts (sift-setup.py, sift-uninstall.py) perform standard privileged operations (file system modifications, subprocess execution) typical for such installations, the inherent trust placed in the closed-source binary is significant. Tools like `sift_sql` or `sift_edit` (with its patch mode) could pose security risks (e.g., SQL injection, arbitrary file manipulation) if inputs from the interacting LLM are not meticulously sanitized and validated within the C implementation. The system design implicitly relies on robust internal handling and careful constraint of the LLM's capabilities to prevent abuse.