Skillget

godmode

mcp
Guvenlik Denetimi
Basarisiz
Health Uyari
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Basarisiz
  • rm -rf — Recursive force deletion command in apps/docs/package.json
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This tool is a CLI designed to act as a unified interface for AI coding agents. It provides a single execution grammar to run various installed extensions, APIs, and MCP servers while inherently scoping permissions and restricting dangerous actions within its sandboxed environment.

Security Assessment
The tool is designed to execute shell commands and interact with external APIs, which inherently requires careful handling. The automated audit caught a recursive force deletion command (`rm -rf`) inside the `apps/docs` directory. While this is likely just a cleanup script for the documentation build process, it is still a code execution red flag that warrants a quick manual review. No dangerous account permissions or hardcoded secrets were found, and the built-in extension system actively restricts what operations can be reached. Because it acts as a wrapper for arbitrary local commands and network requests, overall risk is rated as Medium.

Quality Assessment
The project is quite new, evidenced by very low community visibility (only 5 stars). However, it is under active development (last push was today) and is properly licensed under the permissive MIT license. At this early stage, community trust is minimal, so developers should rely on their own code review rather than widespread community validation.

Verdict
Use with caution. While the permission-scoping concept is excellent for agent safety, the low community adoption and flagged shell execution commands mean you should inspect the repository closely before granting it system access.
SUMMARY

agentic sandboxed swiss army knife

README.md

godmode

Your agent's Swiss Army knife for the terminal.

npm MIT

Documentation · Extensions

Imagine your coding agent gets dropped on a desert island and is allowed to bring one thing. What would it pick? A Swiss Army knife, obviously. The terminal is that island — sometimes it's a bare, lonely sandbox with nothing on it, sometimes it's a rich setup like a Mac Studio with everything you could want. But as long as the agent has a knife it can pull any tool out of, it'll be fine. That knife is godmode.

What it does

godmode is a CLI with one invocation grammar for everything you install — APIs, MCP servers, local commands. Each of those is an extension, and they all take the same shape:

godmode [extension] [interface] [args]

Because every call goes through godmode, extensions can scope what's reachable: a stripe extension can hide account edits, a filesystem extension can restrict paths, a database extension can forbid writes. The sandbox is inherent to the abstraction, not a feature layered on top. For a sandboxed agent, that means one permission — Bash(godmode:*) — unlocks the entire toolbelt.

npm install -g godmode
godmode ext install stripe
godmode stripe api GET customers cus_123
godmode stripe mcp                          # serve over MCP

See the docs for installation, the full grammar, authentication, and integrations.

Yorumlar (0)

Sonuc bulunamadi