HomeMCP

The server uses `subprocess.Popen` for playing audio, but the arguments (`config.player_args` and `radio.url`) are derived from local configuration files (`.env` and `radios.json`) and not directly from untrusted user input, mitigating command injection risks. Telegram API calls are made with a bot token and chat IDs loaded from `.env`, which is good practice. The `send.sh` script relies on `claude`'s tool calling safety to prevent misuse. There are no hardcoded secrets or obvious `eval` patterns. The primary security consideration is ensuring the `.env` file is secured and `player_args` is configured safely, as well as the inherent risks associated with piping arbitrary transcription output to an LLM for tool execution, although `--allowedTools=home` limits the scope.