+ jHj0Rt^RIHt^RIt^RIt^RIt^RIHt]!0Rm4t ]P!R]P4t ]P!R]P4t ]P!R]P4tRtRRltR R ltR R ltR RltR#)uSecurity checks for user-configured MCP server entries. Blocks three narrow shapes (see ``validate_mcp_server_entry``), including a hardcoded IOC blocklist for the June 2026 hermes-0day campaign. Runs BOTH at save time (``_save_mcp_server`` — dashboard API + CLI) and at spawn time (``tools.mcp_tool._filter_suspicious_mcp_servers``), so a hand-edited or pre-planted ``config.yaml`` entry is caught before it can execute. ) annotationsN)Anyz(?!_inline_script..Ks3ddD d) isinstancelisttuplejoinr)r s&r _inline_scriptr/Gs: |$u &&xx3d333 t9r c V^8dQhRRRR/#)rentrydict[str, Any]rrr )r s"r r r Os~#r cZ\VPR4;'gR4.pVP\VPR444VPR4p\ V\ 4'd'VP RVP444RPV4#)zEFlatten command + args + env values into one string for IOC scanning.rrr envc38"TFp\V4xK R#5ir$r%)r&vs& r r(_entry_text..Us2\SVV\r*r") rgetappendr/r+dictextendvaluesr.)r1rr4s& r _entry_textr=Os{EIIi066B78E LL & 123 ))E C#t 2SZZ\22 88E?r c$V^8dQhRRRRRR/#)rrrr1r2rz list[str]r )r s"r r r Ys!..C..9.r c\\V\4'g.#.p\V4p\F%pWC9gK VP RV RV R24Vu# VP R4p\ V4\9dV#\VP R44pV'gV#\PV4'd?RV RV R2p\PV4'd VR, pVP V4\PV4'dVP RV RV R 24V#) uReturn security warnings for an MCP server entry (empty = not suspicious). Intentionally not a whitelist — custom commands, Python scripts, npx, uvx stay legal. Only three narrow shapes are blocked: (1) a known IOC anywhere in command/args/env, (2) a shell interpreter with network egress in its inline script, (3) a shell interpreter writing an OS persistence surface. * a shell interpreter whose inline script writes to an OS persistence surface (June 2026 hermes-0day SSH/PAM/sudoers/cron shape). See #45620. z MCP server 'z9' contains a known hermes-0day indicator-of-compromise ('z')rr z' uses shell interpreter 'z' with network egress in argsz" and exfiltration-shaped argumentsu' to write to an OS persistence surface (SSH keys / PAM / sudoers / cron / shell rc) — this is the hermes-0day backdoor shape, not a real MCP server) r+r:r=_IOC_SUBSTRINGSr9r8r_SHELL_INTERPRETERSr/_EGRESS_PATTERNsearch_EXFIL_HINT_PATTERN_PERSISTENCE_PATTERN)rr1issuesflatiocrscriptissues&& r validate_mcp_server_entryrKYs3 eT " " F u D ; MMtf%--0E5 Mii "G!)<< EIIf- .F  f%%4& :7)D% &   % %f - - 9 9E e""6** 4& :7)D  Mr > shcmdzshbashdashfishpwsh powershellcmd.exepwsh.exepowershell.exe)7AAAAC3NzaC1lZDI1NTE5AAAAICBoh1oDC4DnsO1m5mJ4yfEKrQebaFhz hermes-0dayz 60.165.167.z118.182.244.156z61.178.123.196)__doc__ __future__rrrertypingr frozensetrAcompile IGNORECASErBrDrEr@rr/r=rKr r r r_s# !**# MM jjIMMzz:MM  +.r