mcp-server-fvwm3

The server executes arbitrary shell commands via `fvwm_execute` and other tools use `child_process.execAsync` with user-supplied inputs (e.g., `window_id` in `fvwm_get_window_info` and `smart_tile_state`). While some basic sanitization is present for `fvwm_execute` (double quotes), this does not prevent broader command injection. `window_id` is directly concatenated into commands or file paths (e.g., `rm -f ${stateDir}/${window_id}`), posing path traversal and arbitrary file deletion risks. The README explicitly warns about these risks, stating the server should only be used in trusted environments and that generated commands should be reviewed.