bettertouchtool-mcp-server

The server exposes powerful BetterTouchTool capabilities to an AI agent, including reading/writing arbitrary local file paths for preset management, displaying notifications with arbitrary images, and reading/writing clipboard content. While the server itself doesn't contain obvious injection vulnerabilities (inputs are Pydantic-validated), a compromised AI agent controlling this server could leverage these capabilities to perform destructive actions (e.g., overwrite system files via preset export), access sensitive user data (e.g., read clipboard contents), or exfiltrate local files if combined with other tools. The default communication is local HTTP, but passing a 'shared_secret' in a URL parameter is generally not ideal, though mitigated by default localhost operation. The `bttcli` subprocess execution appears robust against direct command injection from the MCP client.