mcp-sdk-audit

No direct evidence of embedded malware (no eval/Function, no network exfiltration, no credential theft/persistence) in this snippet. However, it contains a high-impact operational risk: it spawns and runs a Node entrypoint from a caller-provided repository path with full environment passthrough, effectively turning it into an execution harness if `repo` is not fully trusted. Additional robustness risk exists from unguarded JSON.parse of untrusted child stdout.