What the reviewer found
Usage guide for the Shell MCP server's exec/readFile/writeFile tools; /etc/shadow, rm -rf / and curl are listed as paths and commands the server blocks, and ALLOW_SUDO is described as off by default. The server it documents runs arbitrary shell commands on the host, which is the capability you are opting into.
What was read
The file as it ships in luciVuc/shell-mcp:
shell-exec/SKILL.md
What the static scan said
The scan flagged 4things. The reviewer kept 0 and dismissed 4 as false.
PE2Asks for root — false positivePE3Reaches for credential files — false positiveRMRecursive force delete — false positiveNETMakes network calls — false positive
How this review was made
Fable 5.1 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.