memmon

The server executes shell commands (`ps aux`, `lsof`, `kill`, `pkill`, `sysctl`, `vm_stat`, `du`, `df`) directly from the backend. While these commands are generally hardcoded or constructed from validated integers (PIDs/ports) and predefined process names, avoiding direct arbitrary user input injection, the `pkill -f` commands are broad and could impact unintended processes if process names overlap. The 'use server' actions for system management are intended for the dashboard UI, not direct public API access. The `killPort` function specifically protects Memmon's own port (1111). Overall, the risks are mitigated given the tool's nature as a local developer utility, but direct shell execution is inherently more privileged than typical web apps.