Skip to content

knewstimek/agent-tool

v0.5.2 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 2mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-coding automation claude-code cli codex cross-platform
+13 more
cursor developer-tools dns encoding file-tools go mcp mcp-server mysql redis sftp ssh tls

Affected surfaces

rce_ssrf breaking_upgrade

Summary

AI summary

PowerShell 5.1 command tokenization added for hang prevention and Git‑bash now preferred over PowerShell.

Full changelog

Quick Start

  1. Download the binary for your OS below
  2. Run agent-tool install (or agent-tool install claude)
  3. Restart your IDE
  4. Done — all tools work immediately, no permission popups

Or just ask your AI agent:

"Download agent-tool from https://github.com/knewstimek/agent-tool/releases/latest and run agent-tool install"

Any capable AI coding agent (Claude Code, Codex, etc.) can handle the full download → install → restart flow automatically.

Tip: Add this to your project's CLAUDE.md or AGENTS.md so your agent prefers agent-tool over built-in tools:

Strict mode (for projects with non-UTF-8 files or mixed indentation):

ALWAYS use agent-tool MCP tools (mcp__agent-tool__*) instead of built-in file tools.
Do NOT use built-in Read, Edit, Write, Grep, or Glob — use mcp__agent-tool__read,
mcp__agent-tool__edit, mcp__agent-tool__write, mcp__agent-tool__grep, mcp__agent-tool__glob instead.

Soft mode (general projects):

Prefer agent-tool MCP tools (mcp__agent-tool__*) over built-in file tools when available.

What's New in v0.5.2

PS 5.1 Sentinel Hang Prevention

  • Tokenize pre-validation: All commands sent to PowerShell 5.1 are now Base64-encoded and validated with PSParser::Tokenize before execution via Invoke-Expression. The wrapper is always syntactically valid PS, so the sentinel marker runs even if the user command has parse errors. This prevents hangs from ANY PS 5.1 parsing failure, not just && / ||.
  • Shell priority change (from v0.5.1+1): Git-bash is now preferred over PowerShell 5.1 (pwsh > git-bash > powershell 5.1 > cmd.exe), reducing exposure to PS 5.1 edge cases.
  • $LASTEXITCODE fix: Reset to $null before Invoke-Expression so the sentinel correctly falls back to $? for PS cmdlets.

Full PS 5.1 defense stack

  1. Chain operator tokenizer — transforms && / || to PS equivalents
  2. Paren depth tracking — delegates $(cmd1 && cmd2) to git-bash
  3. Tokenize pre-validation — catches ALL remaining parse errors (NEW)
  4. Timeout — kills hung commands after deadline

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track knewstimek/agent-tool

Get notified when new releases ship.

Sign up free

About knewstimek/agent-tool

Encoding-aware, indentation-smart file tools for AI coding agents. 20+ tools including read/edit with automatic encoding detection, smart indentation conversion, SSH, SFTP, process management, and system utilities. Preserves file encoding (UTF-8, EUC-KR, Shift_JIS, etc.) and respects .editorconfig settings.

All releases →

Beta — feedback welcome: [email protected]