vscode-automation-mcp

The `vscode_execute_script` tool explicitly allows executing arbitrary JavaScript code within the VSCode window context, granting full access to the DOM and global objects. This is a core feature for powerful automation but means the server can be instructed to execute potentially malicious code if an untrusted AI agent or compromised prompt is used. Internal `child_process.execSync` calls are used for process management during setup and are not directly exposed to tool inputs. File system operations are confined to the configured storage path or explicit file path inputs.