Eidos

The server uses `subprocess.run` to execute system tools (compilers, sanitizers, `readelf`). Code is written to temporary files before being passed to tools, mitigating direct command injection through the code string. The README emphasizes running within a sandboxed Docker container, which is crucial for secure execution of untrusted code. The `sanitize_input` utility function is defined but not actively used in the provided source code, which is a minor oversight but not a critical vulnerability given the current `subprocess.run` pattern using lists of arguments and temporary files. No `eval` or hardcoded secrets found.