git-mcp-server

The server uses `child_process.exec` to execute Git commands. Several handlers, such as `handleGitAdd`, `handleGitBranch`, and `handleGitRemote`, directly concatenate user-provided arguments (`files`, `branchName`, `name`, `url`) into shell commands without sufficient sanitization. This presents a critical shell injection vulnerability, allowing an attacker to execute arbitrary commands on the host system by crafting malicious input arguments. While `git_commit` attempts basic escaping for the message, it's not comprehensive enough for all shell contexts, and other commands lack even this basic protection. The `directory` argument is also directly used as `cwd`, which could be exploited in conjunction with injection to target specific paths.