Evidence · DiggingBeagle record
AI-SDLC MCP GitHub repository shell injection fix
Maintainer patch removing interpolated shell construction from MCP issue and pull-request tools.
- Source role
- patch commit artifact
Evidence record
Maintainer patch removing interpolated shell construction from MCP issue and pull-request tools.
Claim-level citations (2)
- supportsAI-SDLC MCP arguments reached a shell through repository-name interpolation: The maintainer pull request replaces shell-interpreted gh commands in check_issue and check_pr_status with argument-vector process execution; this verifies a source patch, not the first fixed distributed package.
ai-sdlc pull request 1982: execSync to execFileSync and repository validation
- supportsAI-SDLC MCP arguments reached a shell through repository-name interpolation: AI-SDLC MCP GitHub issue and pull-request tools constructed shell commands using an untrusted repository parameter and execSync. An agent or caller had to influence the repo tool argument before the GitHub CLI was invoked under the MCP host account. The resulting shell string could interpret metacharacters as commands rather than as a repository identifier.
ai-sdlc pull request 1982: execSync to execFileSync and repository validation