codebadger-toolkit

The server itself does not use 'eval' or contain obvious malicious patterns. Input validation is applied to various parameters, including CPGQL queries, to prevent common injection attacks. However, the spawned Joern server instances run within a Docker container, and their ports (2000-2999) are mapped directly to the host's localhost interface by default (`docker-compose.yml`). These Joern instances currently lack explicit authentication (`joern.server_auth_username/password` from config are not passed to `JoernServerClient`), meaning any other process on the host machine could potentially interact with them directly, bypassing the MCP server's tool interface. While this is a local access risk rather than external network exposure, it's a notable design choice.