adeo-mozaic-mcp

The server primarily processes static data from cloned Git repositories and communicates via stdio, limiting direct network exposure during runtime. The `execSync` function is used in the build script (`scripts/build-index.ts`) for cloning repositories and running `npm install`, which is an acceptable practice for a build-time process using fixed commands. There are no apparent uses of `eval`, obfuscation, or direct handling of untrusted user input for critical operations. It relies on `better-sqlite3`, a native Node.js module, which requires trust in the library itself.