code-buddy

The server includes a `RunCommandTool` that uses `subprocess.run` (or `asyncio.create_subprocess_shell`) to execute arbitrary shell commands based on LLM output. Additionally, the `PathValidator`'s `allow_external_paths` is `true` by default, meaning the agent can access and modify files anywhere on the file system, not just within the project root. These features, while powerful, introduce significant security risks if the LLM's command generation or file access can be exploited by malicious prompts, potentially leading to arbitrary code execution or unauthorized file manipulation outside the intended project scope. The `edit_file` tool also has a strict matching requirement, pushing agents towards `write_file` which is more destructive for broad changes.