agent-workbench

The server performs powerful file system operations (read, write, delete, move) and extensive code modifications (edit_symbol, apply_edits, rename_symbol). While these are core to its function as a coding agent tool, they carry inherent risks if misused by an agent, or if the agent itself is compromised. The tool mitigates some risks with `dry_run` options for previewing changes and atomic operations with rollback. Regex escaping is correctly used for string replacements to prevent regex injection. There are no obvious signs of `eval` or unsanitized `child_process` execution within the `syntax` package itself. It relies on standard Node.js file system APIs and `tree-sitter` for parsing. The server operates locally via `stdio`, reducing direct network attack surface for its core functions.