mcp-server

The code exposes an unrestricted remote command execution capability through a tool. This is a critical security risk unless the tool is strictly trusted and isolated. The implementation should avoid shell execution where possible; otherwise it should enforce authorization, use a strict command allowlist, pass structured arguments without shell interpretation, sandbox execution, restrict privileges, and avoid logging sensitive commands to stdout.