What is mcp-ShellGateway copilot-instructions.md?

Project instructions for building and maintaining an MCP Linux shell server. MCP, or Model Context Protocol, is a standard way for an AI agent to call tools such as shell commands.

Working on command execution, directory navigation, validation, error handling, asynchronous Python code, type hints, and project formatting.

They give the coding agent the project's purpose, structure, security expectations, and coding rules. This reduces guesswork when changing the server.

mcp-ShellGateway copilot-instructions.md — Instructions file by Sarks0

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add instructions/sarks0/mcp-shellgateway/copilot-instructions

Clone the repo

git clone --depth 1 https://github.com/Sarks0/mcp-ShellGateway

Made for: GitHub Copilot.

Per session 384 This file is loaded in full into every session.

When invoked 384 The same file — it is already loaded in full.

Security scan C 1 finding. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00384	$0.00384
Opus 5	$0.00192	$0.00192
Sonnet 5	$0.00077	$0.00077
Haiku 4.5	$0.00038	$0.00038

Measured 2d ago against content hash d30e0e116c46, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

mcp-ShellGateway copilot-instructions.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Hidden instructionshighPrompt injection

Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.

<!-- Use this file to provide workspace-specific custom instructions to Copilot. For more details, visit https://code.visualstudio.com/docs/copilot/copilot-customization#_use-a-githubcopilotinstructionsmd-file -->

.github/copilot-instructions.md · 46 lines

What it actually says

MCP Linux Shell Server - Copilot Instructions

This is an MCP (Model Context Protocol) server project that provides Linux CLI access through the MCP protocol.

Project Context

Project Type: MCP Server
Language: Python 3.8+
Framework: MCP SDK (Model Context Protocol)
Purpose: Provide safe Linux shell command execution for Claude Dev mode

Key Guidelines

MCP Protocol Compliance: Always follow MCP protocol specifications from https://modelcontextprotocol.io/
SDK Reference: Use the MCP Python SDK reference at https://github.com/modelcontextprotocol/create-python-server
Security First: Implement proper error handling and input validation for shell commands
Async Programming: Use async/await patterns throughout the codebase
Type Safety: Include proper type hints for all functions and methods

Architecture

linux_shell_server/main.py: Main server implementation with MCP handlers
linux_shell_server/__init__.py: Package initialization
Tools provided: execute_command, change_directory, get_current_directory

Code Standards

Follow PEP 8 style guidelines
Use Black for code formatting
Include comprehensive error handling
Add docstrings for all public functions
Maintain compatibility with Python 3.8+

Testing

Write tests for all shell execution functionality
Mock subprocess calls in tests
Test error conditions and edge cases
Ensure async function testing with pytest-asyncio

Documentation

You can find more info and examples at https://modelcontextprotocol.io/llms-full.txt

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2d ago First seen · 46 lines · 384 tokens per session scan C d30e0e116c46

Subscribe to this mod's changes

mcp-ShellGateway copilot-instructions.md is an instructions file published in the GitHub repository Sarks0/mcp-ShellGateway (2 stars, last pushed 1y ago), licensed MIT. It adds 384 tokens to every session, about $0.0019 per session on Opus 5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

mcp-ShellGateway copilot-instructions.md