AUTOCAD-MCP

The server uses `win32com.client` for COM automation, which grants significant control over the CAD application. While this is its intended functionality, a compromised AI assistant or misinterpretation of commands could lead to unintended modifications within CAD drawings. The `process_command` tool relies on regex parsing, preventing direct code injection. File saving via `save_drawing` accepts an arbitrary `file_path`, which could potentially be exploited by a malicious input to save files to unintended locations on the system if the server process has elevated write privileges. However, no `eval` or similar dangerous dynamic code execution patterns were found, and it communicates over standard I/O (stdio) rather than exposing network ports.