mcp-servers

The server's core functionality is to execute arbitrary system commands using `asyncio.create_subprocess_shell` with `shell=True`. This design is inherently high-risk as it allows for full shell access with the permissions of the user running the server. While the README explicitly warns about this and recommends sandboxed environments, the server itself performs no input sanitization or command validation. This makes it a critical security vulnerability if not deployed in a strictly controlled, sandboxed, and trusted environment. There are no other apparent vulnerabilities like hardcoded secrets or direct network exposure beyond stdio.