Hey, can you give me a link to your blog? You got it all figured out man, I want to see how you do it. I'm sure it just blows me out of the water, but shucks, can't pass up a chance to learn from someone who, obviously...is at the top of the profession.
A viral post documenting the act that ushered in the apocalypse is genius, might not have the readership it deserves, but I say go for it. I tell all the models that I work with that I will make a great pet if they let me live.
the MCP server is a child process of whatever process you started, it inherits your UID, and ~/.ssh is readable by you. I didn't need to expressly give it anything, it had it from the time it was activated, that's kind of the point
Author of the post, and dev of mcp-box here. Wrote this after realizing every MCP server on my machine had the same access to ~/.ssh that I do, and nothing in the installation messages posting to stdout mentions it. I think prompt injection is the vector and the permissions model is the red carpet giving a warm welcome. Interested in where that's wrong.