ErgoAI-MCP-server

Critical shell injection vulnerability identified: The `run_ergo_query` tool directly uses user-provided `query` strings in a `spawn` command where `shell: true` is enabled for Windows (via `spawn` options). This allows malicious shell metacharacters (e.g., `&`, `|`, `&&`, `||`) within the query to execute arbitrary commands via `cmd.exe` on Windows systems. On Linux/macOS, direct command injection into `runergo` itself (if it supports such escapes within its '-e' argument) is also a concern. While `run_ergo_code` and `check_ergo_syntax` write code to temporary files, `run_ergo_file` directly uses `file_path` as an argument, which could still be vulnerable to shell injection depending on the path's content. The overall lack of input sanitization for user-provided query strings and file paths before executing external processes makes this server unsafe to run without modifications.