xc-mcp

The server relies heavily on `child_process.exec` and `child_process.spawn` to execute `xcodebuild`, `simctl`, and `idb` commands. While some inputs are validated (`appPath`, `bundleId`, `udid` in certain tools), not all user-provided string arguments are universally sanitized against shell injection (e.g., `name` in `simctlCreateTool`, `query` in `idbUiFindElementTool`). The `executeCommand` utility uses `exec` which defaults to `shell: true`, making it vulnerable if unvalidated inputs are passed. Running external commands based on AI agent output, which might generate unexpected or malicious strings, poses a significant security risk. It should be run in a highly restricted or sandboxed environment, and comprehensive input validation/escaping should be implemented for all arguments passed to external commands.