install-mcp

No intrinsic malware, exfiltration, or backdoor logic is evident in this wrapper template. The dominant security concern is that it `source`s a local credentials.env file, turning filesystem integrity into arbitrary code execution risk for the user running the wrapper. Permission checks are non-enforcing, and command execution uses partially unquoted variables, increasing the impact if sourced values are malicious or malformed.