ast-mcp-server

The project uses `subprocess.run` to execute the `ast-grep` CLI tool for code transformation. This is handled by passing arguments as a list (not `shell=True`), which mitigates direct shell injection risks. However, executing external binaries with user-provided patterns/replacements inherently carries a risk, which depends on the trustworthiness of the `ast-grep` tool itself and the sanitization of user input by the client. Neo4j and OpenRouter API keys are correctly managed via environment variables. Multiple development-related scripts utilize `sys.path.insert(0, os.getcwd())`, a practice that can introduce path-based vulnerabilities if the current working directory is untrusted, though in a local development context, this is less critical.