ubem-mcp

The server uses `subprocess.run` to execute external EnergyPlus and ExpandObjects binaries. While arguments are passed as a list (mitigating direct shell injection), the paths for IDF files, weather files, and output directories are directly derived from user-supplied tool parameters. In a malicious or compromised MCP client environment, crafted paths could potentially lead to unintended file system operations or execution of arbitrary code if the external binaries or the operating system's path resolution are vulnerable to specific path manipulations (e.g., symlink attacks, directory traversal with executable names). The project assumes a trusted local execution environment (e.g., LLM client on the same machine). No hardcoded secrets or direct network risks were identified.