chatgpt-mcp-server

The server is explicitly designed to grant ChatGPT 'full access' to the host machine. This includes arbitrary filesystem operations (read, write, delete recursively) and direct execution of unvalidated PowerShell commands (`execute_command`). These capabilities allow for full system compromise, data destruction, or exfiltration if the ChatGPT model acts maliciously, is misled, or if the server itself is compromised. There is no built-in authentication or authorization beyond the initial connection to ChatGPT. A hardcoded passphrase 'chatgpt-mcp' is used for the PFX certificate in `https-server.ts`, which is a minor vulnerability, but the major risk is the fundamental design of providing unrestricted access to an AI agent.