mcp-safe-run

The server's primary function is to resolve and inject secrets into a child process's environment. It uses `keytar` for secure OS keychain integration, which is a robust practice. `env:` placeholders read from process environment variables, and `file:` placeholders read from specified file paths. The main security consideration lies in the trustworthiness of the configuration inputs (YAML files or `--target-env` CLI argument). If these inputs are compromised, `file:` placeholders could be used to exfiltrate local files, or a malicious `targetCommand` could be executed by the child process. The tool itself does not contain `eval()` or other direct arbitrary code execution vulnerabilities in its parsing or resolution logic, making it safe when its configuration inputs are trusted.