mcp-bundle-factory

The `ProcessManager` utilizes `shell: true` when spawning child processes, which is a known security risk if the `command` or `args` are user-controlled without strict sanitization. While the base `command` and `args` are embedded in the bundle's `server-config.json`, user-provided configuration values (e.g., API keys, endpoints) are substituted directly into these `args` as environment variables. If these user inputs are not properly validated or sanitized by the Claude Desktop environment before being passed to the proxy, a malicious user could potentially inject shell commands. The `downloader.js` also uses `spawn` for `powershell`, `unzip`, and `tar` for archive extraction; however, the paths and commands for these are constructed internally based on trusted configuration. No `eval` is found. Credentials are passed via environment variables and marked sensitive, suggesting secure handling by Claude Desktop.