Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ivanmurzak/unity-mcp

              main @ 2835c0b
            

Fixes

CVEs

HIGH

Peak severity

58.3%

Coverage

Highlights

Command Injection: 3 prior fixes. Scrutinize any change in this area.

cli/src/commands/run-tool.ts: most-fixed (2 issues). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Unescaped shell execution in system process helpers allowed arbitrary command injection. Developers must use safe, argument-parameterized alternatives like execFile and avoid string interpolation in shell executors.

Path Traversal: Skill creation tools permitted arbitrary file write access outside of the designated project Assets directory. Paths must be canonicalized and checked against a strict directory prefix before write operations.

Auth Bypass: Untrusted pull requests triggered via pull_request_target could execute arbitrary code with repository secrets. Access control labels and workflow modification checks must be verified before executing triggers.