context-bridge-mcp

CRITICAL RISK: The application exposes an 'executeCommand' function via the context bridge, allowing the renderer process (and thus potentially untrusted web content via an input field) to execute arbitrary system commands on the host machine using `child_process.exec`. This is a severe remote code execution vulnerability, allowing any user of the application to execute any command on their system. The `executeMCPCommand` function is also dangerous, as it executes commands with `mc-p` prefix, which could still lead to unintended system changes or exploits depending on what `mc-p` is.