Please do not open public GitHub issues for security vulnerabilities.

Report privately by opening a GitHub Security Advisory or emailing the repository owner.

We aim to acknowledge reports within 72 hours.

scctl is not a sandbox. The sc_eval MCP tool executes arbitrary SuperCollider code with the privileges of the host user. SuperCollider can access the file system, spawn processes, and load extensions.

• Run the Pilot MCP server locally only
• Connect only trusted MCP clients (e.g. Claude Desktop, Cursor on your own machine)
• Do not expose the Pilot server to the public internet
• Review AI-generated SuperCollider code before execution when the source is untrusted

Code execution risks inherent to SuperCollider itself are expected behavior, not vulnerabilities in scctl, unless scctl fails to document or enforce its stated trust model.