mcp-server-builder

The code is not overtly malicious, but the TypeScript MCP server contains high-impact command-injection risks because untrusted tool arguments are embedded in execSync shell commands. The unrestricted review_code file path also permits arbitrary readable-file disclosure. The Python command execution shown is materially safer due to its fixed allowlist and non-shell subprocess invocation. Inputs should be validated and passed as argument arrays, shell execution should be avoided, and file paths should be restricted to the project root. No evidence of credential theft, persistence, network exfiltration, or other intentional malware is present in the supplied fragment.