mcp

CRITICAL PATH TRAVERSAL VULNERABILITY: The `create_plan_template` tool uses user-provided `featureBranch` directly in `path.join` and `path.resolve` to construct file paths. A malicious user could provide a `featureBranch` like `../../../../etc` to write files outside the intended `PLANS_DIRECTORY`, potentially leading to arbitrary file writes on the host system. This is a severe vulnerability. Additional points: - Reliance on external CLI tools (`git`, `gh`): Assumes these tools are installed and configured securely on the host system. While `nano-spawn` correctly passes arguments as arrays (mitigating simple command injection), the security posture depends on these external binaries. - No `eval` or obvious hardcoded secrets were found. - Environment variables are explicitly required and not hardcoded, which is a good practice.