genpark-agent-bash-command-sandbox-guard-skill
OfficialThis server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
genpark-agent-bash-command-sandbox-guard-skill
⚡ Overview & Architectural Significance
genpark-agent-bash-command-sandbox-guard-skill provides zero-dependency, deterministic agentic execution safety, sandboxing, and financial circuit breakers engineered strictly using Python 3.9+ standard library.
🌟 Key Architectural Capabilities
Zero External Dependencies: Operates exclusively via pure Python (
math,re,collections,heapq,hashlib,json). Zero pip install overhead, zero C-extension compile errors.Enterprise Agent Safety Invariants: Implements formal defenses against destructive shell commands, prompt injections, runaway spend loops, differential privacy data leakage, and planning deadlocks.
Native Anthropic MCP Protocol: Compliant with standard JSON-RPC 2.0 stdio MCP specifications for Claude Desktop, Cursor, and Windsurf.
Related MCP server: just-bash-mcp
🏗️ Architectural Safety State Machine
flowchart TD
UserPrompt["Incoming User Instruction / External Input"] --> InjectionGuard["Prompt Injection & Jailbreak Sentinel"]
InjectionGuard -->|Malicious Injection| BlockPrompt["Reject Prompt (400 Bad Request)"]
InjectionGuard -->|Safe Prompt| AgentPlanner["Autonomous Agent Planner / LLM Core"]
AgentPlanner --> CircuitBreaker["Token Spend & Cost Circuit Breaker"]
CircuitBreaker -->|Budget Exceeded| FreezeSpend["Freeze Execution & Alert Admin"]
CircuitBreaker -->|Within Budget| LoopDetector["Deadlock & Liveloss Loop Detector"]
LoopDetector -->|Infinite Loop Detected| BreakLoop["Inject Corrective Guidance & Reroute Plan"]
LoopDetector -->|Healthy Trajectory| CommandSandbox["Bash / Subprocess Sandbox Guard"]
CommandSandbox -->|Destructive / Traversal| BlockCmd["Block Execution (Security Violation)"]
CommandSandbox -->|Safe Command| ToolExec["Safe Tool Execution"]
ToolExec --> PrivacyGuard["Synthetic Data Differential Privacy Guard"]
PrivacyGuard --> SanitizedOutput["Sanitized Output & Verified Return"]🚀 Quickstart & Standalone Execution
Local Python Client Usage
from client import AgentBashCommandSandboxGuard
# Initialize engine
engine = AgentBashCommandSandboxGuard()
# Execute self-testing benchmark suite
result = engine.run_benchmark_bash_guard()
print("Execution Result:", result)🔌 One-Click MCP Integration (Claude Desktop / Cursor)
Add to your claude_desktop_config.json or cursor.json:
{
"mcpServers": {
"genpark-agent-bash-command-sandbox-guard-skill": {
"command": "python",
"args": ["-u", "/path/to/genpark-agent-bash-command-sandbox-guard-skill/mcp_server.py"]
}
}
}📦 Smithery.ai & PyPI Deployment
This skill contains pre-configured smithery.yaml and pyproject.toml manifests. Install directly via pip:
pip install git+https://github.com/alphaparkinc/genpark-agent-bash-command-sandbox-guard-skill.gitRelated MCP Connectors
Autonomous agent guardrails, bash sandboxing, MCP rugpull diffing & prompt firewalls.
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
Real-time MCP & A2A prompt-injection, jailbreak, and tool-schema poisoning firewall for AI agents.
Related MCP Servers
- FlicenseCqualityDmaintenanceSandbox-first command safety layer for MCP-compatible coding agents, protecting commands executed through its safe_exec tool by blocking destructive operations and requiring human approval for ambiguous commands.2-
- AlicenseAqualityFmaintenanceSandboxed bash execution MCP server for AI agents, using an in-memory virtual filesystem overlay to prevent real filesystem damage, with configurable network access, timeouts, and optional Python/JS runtimes.951 npmApache 2.0
- FlicenseNot gradedqualityCmaintenanceEnables autonomous AI agents and MCP clients to route tool calls through a zero-trust firewall that blocks dangerous shell commands, redacts secrets and PII, restricts sensitive file access, and logs verdicts. It provides an MCP interceptor decorator to protect MCP server tools with AST-based command injection checks and allow, block, or redact decisions.2-
- AlicenseNot gradedqualityBmaintenanceEnables MCP servers and local AI agents to safely interact with host environments by blocking indirect prompt injections, directory traversal, and malicious shell commands.MIT