- No hardcoded secrets; Origin+path+maxPayload checks verified wired in server.ts - No eval/exec; input is verbatim to PTY by design (byte-shuttle) - npm run build -> dist/server.js verified