Skip to main content
Glama

WritersLogic verifiable AI agents

archive-preflight

Archive extraction preflight: zip-slip, duplicate destinations, symlink conflicts — Checks a manifest of up to 2000 archive entries (path, type, link target, sizes) before extraction, for an agent that unpacks zip, tar or OOXML files: ../ traversal (also through backslashes), absolute, drive-letter and UNC paths, entries that write through a symlink, symlink and hardlink targets that leave the root, duplicate destinations, case-only and NFC/NFD collisions, Windows reserved names,

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "entries": "<entries>"
    },
    "name": "archive-preflight"
  }
}

Input Schema

NameRequiredDescriptionDefault
limitsNo
entriesYesAt most 200000 characters of paths and link targets in total.
targetsNoFilesystems to check collisions and name rules for. Default: windows, macos and linux.
destinationRootNoExtraction directory; counted towards total path length.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

Score is being calculated.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources