kali_mcp-mcp-server

The server uses `subprocess.run` with argument lists, mitigating shell injection risks. Input sanitization is mentioned and observed in command construction. However, it ships with insecure default API keys ('changeme_admin_key', 'changeme_operator_key') and MinIO credentials ('minioadmin'). The README explicitly warns against exposing the server publicly without proper network controls and advises rotating API keys. Artifacts containing sensitive information are stored and require proper retention policies. The tools themselves (nmap, sqlmap, etc.) are powerful and inherently risky if misused or pointed at unintended targets. The `binwalk_extract` and `apk_static` tools process files by path inside the container, requiring careful management of container mounts.