reasoning-tools

The server includes a `code_exec` tool that executes Python code on the host system. While extensive validation (`validatePythonCode` using string pattern matching and AST analysis via Python subprocess) is implemented to block many dangerous operations (e.g., file system access, process execution, dynamic imports, dunder method manipulation, common obfuscation), running arbitrary user-supplied code, even with these restrictions, carries inherent residual risks of bypass or unforeseen vulnerabilities. The README explicitly warns: 'This tool executes code on the host system without full sandboxing. Only use in trusted environments.' Without dedicated containerization or a more isolated sandbox, it is not fully secure and should not be run in environments where untrusted input is processed or on critical systems.