Skillporter: a read-only-by-default MCP server to block skill injection
ImMandatory · reddit · 2026-11-15
A developer released Skillporter (MIT, runs locally, no account) — a skill package manager for 19 harnesses whose MCP mode defaults to read-only, addressing the common pattern of MCP servers granting models write access while trusting arguments (a bad pair if skills can inject instructions). Key design: read-only tools (detect/diagnose/scan/inspect/matrix); writes denied unless started with --allow-writes; workspace root fixed via --root or env var, immovable by tool args; rejects .., escaping symlinks, UNC/drive paths, NUL bytes; no remote fetches while read-only; strict typing so "false" isn't coerced. Includes a lockfile and static scan. Author asks how others draw the read-only line.
More from coding & agent
- WebGPU infinite canvas hosts 84 agent cards with voice-only control — NERDDISCO · 2026-11-15
- arXiv: Harness^2 — recursive agent harnessing for open-world tasks — rohanpaul_ai · 2026-11-15
- Google and Northwestern's Harness² self-improves agent harnesses without answer keys — rohanpaul_ai · 2026-11-15
- Dev builds a PowerShell AI harness for Microsoft's new Intelligent Terminal — dfinke · 2026-11-15
- snitch: a harness that watches agents in parallel and reverts bad paths — generativist · 2026-11-15
- Dev: unattended agent runs burn 99% of tokens on useless reproducibility gates — generativist · 2026-11-15