Back to Home
nathanstitt icon

shotter

by nathanstitt

Overview

Automating iOS Simulator interactions and screenshot capture for AI assistants via the Model Context Protocol.

Installation

Run Command
npx shotter-mcp

Environment Variables

  • ANTHROPIC_API_KEY

Security Notes

The server allows execution of arbitrary shell commands via the 'runBefore' field in workflow YAML files (src/workflow/runner.ts). The 'runBefore' script is spawned with `shell: /bin/bash` and directly uses the provided string from the workflow configuration. This is a critical remote code execution vulnerability if a malicious or untrusted workflow file is ever processed. Additionally, `xcrun simctl` commands are executed using `execSync` (src/utils/simulator.ts), though input for these is less directly user-controlled.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassHigh
Avg Tokens2000
Stars0
Forks0
Last Update2025-12-15

Tags

iOS AutomationAI AgentSimulatorMCPWorkflow