system_mcp

The server's core functionality involves direct operating system interaction, including command execution via `subprocess.Popen`, file system operations (read/write), and direct UI manipulation. This grants very powerful control over the user's machine. Security relies heavily on the `tool_unlock_token` and the host system's permissions. If the token is compromised, an attacker could gain full control. The code itself does not show immediate signs of malicious intent or 'eval' of untrusted input, and input parameters are validated. However, due to its inherent power, misuse or compromise of the token poses a high risk. It is safe to run only if the environment is secure and the unlock token is protected.