knewstimek/agent-tool

v0.4.1 Security

This release includes 3 security fixes for security teams reviewing exposed deployments.

Published 2mo MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 3 known CVEs

Topics

ai-coding automation claude-code cli codex cross-platform

+13 more

cursor developer-tools dns encoding file-tools go mcp mcp-server mysql redis sftp ssh tls

Affected surfaces

auth rce_ssrf

Summary

AI summary

Security hardening: SFTP writes to sensitive paths blocked, dangerous env vars filtered, async transfer TOCTOU race fixed.

Full changelog

Quick Start

Download the binary for your OS below
Run agent-tool install (or agent-tool install claude)
Restart your IDE
Done — all tools work immediately, no permission popups

Or just ask your AI agent:

"Download agent-tool from https://github.com/knewstimek/agent-tool/releases/latest and run agent-tool install"

Any capable AI coding agent (Claude Code, Codex, etc.) can handle the full download → install → restart flow automatically.

Tip: Add this to your project's CLAUDE.md or AGENTS.md so your agent prefers agent-tool over built-in tools:

Strict mode (for projects with non-UTF-8 files or mixed indentation):

ALWAYS use agent-tool MCP tools (mcp__agent-tool__*) instead of built-in file tools.
Do NOT use built-in Read, Edit, Write, Grep, or Glob — use mcp__agent-tool__read,
mcp__agent-tool__edit, mcp__agent-tool__write, mcp__agent-tool__grep, mcp__agent-tool__glob instead.

Soft mode (general projects):

Prefer agent-tool MCP tools (mcp__agent-tool__*) over built-in file tools when available.

What's New (v0.4.1)

Security Hardening

SFTP download: Blocks writes to sensitive local paths (.ssh, .gnupg, .config, authorized_keys, .bashrc, etc.)
- Resolves symlinks via filepath.EvalSymlinks to prevent symlink-based bypass
ProcExec: Blocks dangerous environment variable keys (PATH, LD_PRELOAD, LD_LIBRARY_PATH, DYLD_INSERT_LIBRARIES, COMSPEC, IFS, etc.)
Async transfers: Fixed TOCTOU race condition — concurrent transfer limit check and entry insertion are now atomic

Security Fixes

Blocks writes to sensitive local paths (.ssh, .gnupg, .config, authorized_keys, .bashrc) in SFTP download and resolves symlinks via filepath.EvalSymlinks.
Filters out dangerous environment variable keys (PATH, LD_PRELOAD, LD_LIBRARY_PATH, DYLD_INSERT_LIBRARIES, COMSPEC, IFS) in ProcExec.
Fixes TOCTOU race condition in async transfers by making transfer limit check and entry insertion atomic.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track knewstimek/agent-tool

Get notified when new releases ship.

About knewstimek/agent-tool

Encoding-aware, indentation-smart file tools for AI coding agents. 20+ tools including read/edit with automatic encoding detection, smart indentation conversion, SSH, SFTP, process management, and system utilities. Preserves file encoding (UTF-8, EUC-KR, Shift_JIS, etc.) and respects .editorconfig settings.

All releases →