Containerd-mcp-server

The `start_mcp_servers.sh` script utilizes `eval` for command execution, which is generally a security risk, though in this context, the commands are hardcoded within the script itself rather than derived from untrusted input. The Docker socket (`/var/run/docker.sock`) is mounted read-only, which, while safer than read-write, still grants significant access to the host's Docker daemon. The VS Code server data mount (`~/.vscodeserver`) could expose sensitive VS Code configurations or extensions if the container is compromised. Ports 3000-3005 are exposed on the host, increasing the network attack surface if the host is publicly accessible.