mcp-devcontainers

The server primarily acts as a wrapper for the `devcontainers cli`, exposing its functionality. It correctly uses `child_process.spawn` with an array of arguments, which is robust against shell injection for the arguments passed to the devcontainer CLI. The `devcontainer_exec` tool is designed to execute arbitrary shell commands *within the devcontainer*, which is an intended powerful capability. The `outputFilePath` parameter allows writing command output to a specified file. While this could theoretically be misused to overwrite sensitive files if an untrusted client provides a malicious path, for its intended use as a development agent tool, this is considered a minor risk as the client is expected to be trusted.