stelae

The server is designed to execute local commands, manage filesystems, and install/remove other MCP servers, which exposes a significant attack surface if not properly secured at the deployment and access control layers. It relies heavily on `subprocess.run` and `urllib.request.urlopen` for core functionalities and external interactions. Configuration changes via `manage_stelae` allow the server to self-modify its operational capabilities. While the code includes some path validation and environment variable expansion, robust external authentication and authorization are critical, especially when exposed publicly via Cloudflare. Hardcoded secrets are generally avoided, with `OPENAI_API_KEY` and `GITHUB_TOKEN` being passed via environment variables.