Full_UI_Automation

CRITICAL: The `file_mgmt_server` and `vscode_mcp_server` tools utilize `node:child_process.exec` to run PowerShell scripts. User-provided `file_path` and `content` are directly interpolated into these commands (e.g., `-Path "${file_path}"`), creating severe command injection vulnerabilities. A malicious user could execute arbitrary code on the host system with the privileges of the running server. The use of `powershell.exe -ExecutionPolicy Bypass` further exacerbates this risk by disabling PowerShell's script execution restrictions. Additionally, the FastAPI endpoint `/api/chat` lacks any form of authentication or authorization, allowing any client to trigger these highly insecure operations. Hardcoded Windows paths also imply a lack of portability and potential misconfigurations if run in different environments.