blockbench-mcp-plugin

The server includes a 'risky_eval' tool that allows execution of arbitrary JavaScript code directly within the Blockbench plugin's context. While it attempts to filter out `console.` commands and comments, these protections are trivial to bypass with crafted input (e.g., using string concatenation). This presents a severe security risk, as an attacker or compromised AI agent could execute any code with the plugin's permissions, potentially leading to system access or data manipulation outside of Blockbench if the host machine has permissive settings or if the plugin's context has elevated privileges. Network risks are inherent as it runs an HTTP server, making this 'eval' capability particularly dangerous if exposed to untrusted networks.