win-ctrl-mcp

The server executes external macOS commands (`aerospace`, `screencapture`) via subprocesses. While arguments passed to these commands are mostly controlled (e.g., numerical IDs are cast to strings), string arguments like `output_path` for capture tools could potentially allow an instructed LLM to specify malicious file paths for overwriting. However, `subprocess.run` and `asyncio.create_subprocess_exec` are used without `shell=True`, mitigating shell injection for direct arguments. It is primarily designed for a local, single-user desktop environment, reducing external attack vectors. No `eval` or obvious hardcoded secrets were found.