mcp-act

The server's source code includes input validation (e.g., `_is_safe_token` function, character whitelisting, argument count limits) to prevent direct shell injection into the `act` command. It runs as a non-root user. However, the core functionality of the server is to expose `nektos/act`, which is designed to interact with and spawn containers on the host Docker daemon. This grants workflows run through the server significant privileges on the host, making careful deployment and access control critical. The sanitization helps control the `act` command arguments, but not the inherent power of the `act` tool itself or the contents of the GitHub Action workflows it executes.