elenchus-mcp

The `getGitDiff` function in `src/diff/git.ts` uses `child_process.exec` with a user-controlled `baseRef` parameter (`git diff --name-status ${baseRef}`), which is a potential command injection vulnerability if `baseRef` is not properly sanitized. There's also a risk of arbitrary file reads via `src/state/context.ts`'s `readFileWithCache` where `filePath` might be influenced by user input, potentially leading to information disclosure. Direct `JSON.parse` operations on LLM responses (e.g., in `src/tools/dynamic-roles.ts` and `src/tools/llm-eval-tools.ts`) occur before full Zod validation on the parsed content, which could be exploited with a specially crafted malformed JSON for denial-of-service, though this risk is mitigated by LLM's typical outputs.