mcp_tools_server

This server is designed to provide extensive control over the local system, including file modification, directory management, process control, and network settings. Many critical tools directly utilize `utils.sh_exec`, which executes shell commands without a sandbox or robust input validation against arbitrary command injection. While a `sh_exec_sandbox` function exists, it is explicitly *not* registered as a tool by default, leaving most shell interactions vulnerable. An unconstrained LLM could easily exploit these capabilities to delete files, exfiltrate data, install malicious software (via package managers), or cause system instability. The project's stated goal is to provide deep system control, which inherently comes with high security risks when driven by an AI.