Free, open-source SSH client, SFTP, tunnels, database GUI and a secure AI-agent (MCP) bridge in one app a MobaXterm, PuTTY and Termius alternative for Windows, macOS and Linux.
- capability exposure inferred + 22
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 1w ago · see ecosystem CVEs →
No known CVEs for this server.
- high dangerous code
committed secret: private key
analyzed commit d88dd9b · analyzer v33 · 1w ago
danger signals8
- suspicious endpoint 169.254.169.254 (cloud metadata) OpsMaxx-ShellPilot-d88dd9b/tests/frpAdminApi.test.ts :411
res.writeHead(302, { location: 'http://169.254.169.254/latest/meta-data/' }) - committed secret private key OpsMaxx-ShellPilot-d88dd9b/tests/changelog.test.ts :421
PEM private key block (redacted) - committed secret private key OpsMaxx-ShellPilot-d88dd9b/tests/credProxyServer.test.ts :653
PEM private key block (redacted) - committed secret private key OpsMaxx-ShellPilot-d88dd9b/tests/fixtures/ovpn/certs/client.key :1
PEM private key block (redacted) - committed secret private key OpsMaxx-ShellPilot-d88dd9b/tests/fixtures/ovpn/ok-encrypted-key.ovpn :13
PEM private key block (redacted) - committed secret private key OpsMaxx-ShellPilot-d88dd9b/tests/fixtures/ovpn/ok-full-inline.ovpn :64
PEM private key block (redacted) - committed secret private key OpsMaxx-ShellPilot-d88dd9b/tests/posture.test.ts :1475
PEM private key block (redacted) - committed secret private key OpsMaxx-ShellPilot-d88dd9b/tests/sshKeys.test.ts :14
PEM private key block (redacted)
[](https://mcpobservatory.com/servers/github:OpsMaxx/ShellPilot/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of OpsMaxx.