dev-kit-gh-mcp-server

The server uses `dev-kit-mcp-server` which, as indicated in `pyproject.toml`'s `[tool.dkmcp.factory.include]` section, registers tools for local filesystem operations (`create_dir`, `move_dir`, `remove_file`, `rename_file`) and command execution (`exec_make_target`, `predefined_commands`). This means that any client or AI agent interacting with this MCP server could potentially execute arbitrary commands or manipulate the host's filesystem. While GitHub API interactions are authenticated via `GITHUB_TOKEN` (which is sourced from environment variables, not hardcoded), the exposure of host-level command execution and file system manipulation via the MCP interface is a critical security risk if not run in a highly sandboxed and authenticated environment. There is no clear justification for `eval` or obfuscation, and network risks are inherent to any server exposing such capabilities.