gm-exec
gm-exec is a code execution tool intended for MCP clients and a CLI. It runs user-provided code/commands in multiple languages (JS/TS, Python, Go, Rust, C/C++, Java, Deno, bash) with a 15s execution ceiling; after that it background-executes and returns a task id that can be polled/closed.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
The tool executes arbitrary code/commands across multiple languages and shells, which is inherently high-risk. The provided material does not describe authentication/authorization, TLS, sandboxing boundaries, or secret handling. Bun+PM2 process isolation is mentioned, but without details on resource limits, filesystem/network restrictions, or permissioning—so safety likely depends on how it is deployed and isolated (e.g., containerization, firewall rules, least privilege).
⚡ Reliability
Best When
You control the execution environment (host/container), understand the security implications of running arbitrary code, and need an MCP-compatible execution backend with multi-language support.
Avoid When
You need strong access control and safe sandboxing for untrusted users, or you require well-specified operational/SLA and clear retry/idempotency semantics.
Use Cases
- • Execute small snippets of code across multiple languages from an MCP client
- • Run build/test commands in a temporary working directory via CLI (bash/other language toolchains)
- • Background long-running tasks and poll their output via task id
- • Provide a general-purpose execution backend for code-analysis or coding assistants (with MCP integration)
Not For
- • Executing untrusted or sensitive code without strong isolation and auditing
- • Production workloads requiring strict reliability guarantees or comprehensive observability
- • Use cases needing fine-grained authorization, per-user rate limits, or managed multi-tenant security
Interface
Authentication
No authentication mechanism is described in the provided README/manifest. Security is therefore likely dependent on network/process isolation external to the tool.
Pricing
No pricing information provided; appears self-hosted/open-source tooling.
Agent Metadata
Known Gotchas
- ⚠ Execution is capped at 15 seconds; long commands are backgrounded and must be polled/closed with the task id.
- ⚠ Because it executes arbitrary code/commands, agents should assume potential side effects (files/network/processes) unless additional isolation controls are enforced outside this tool.
Alternatives
Full Evaluation Report
Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for gm-exec.
AI-powered analysis · PDF + markdown · Delivered within 30 minutes
Package Brief
Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.
Delivered within 10 minutes
Score Monitoring
Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.
Continuous monitoring
Scores are editorial opinions as of 2026-03-30.