modern-cli-mcp

The server is designed to expose powerful system commands (`shell_exec`, `nix_shell_exec`), extensive filesystem manipulation, network requests, and full Kubernetes/container management. While this is its intended purpose, it means a compromised or misconfigured AI agent could execute arbitrary commands and modify the system with significant privileges. Mitigations include: arguments passed as slices to prevent basic shell injection (though the command itself is agent-controlled), and an `.agentignore` mechanism to restrict AI access to sensitive paths. Authentication for Git forges is handled, but relies on user-provided tokens or interactive login. The inherent power of the exposed tools means security is highly dependent on the controlling AI agent's permissions and the user's trust.