my-mcp-servers

The server's core function is to execute arbitrary shell commands defined in local workflow files (`.cursor/workflows.json`), with an option for autonomous approval. While workflows are intended to be 'explicit' and 'version-controlled', the `child_process.exec` function is used without an internal allow-list or strict command sanitization for workflow commands. If another tool (e.g., a filesystem tool with write access) or a malicious actor can modify the `workflows.json` file, it can lead to arbitrary code execution and full system compromise, especially with `auto_approve: true` workflows. This constitutes a high-risk vulnerability for arbitrary code execution if the workflow definitions are not absolutely trusted and immutable.