git-worktree-mcp

The `ParManager` class utilizes `execSync` to execute shell commands, including `par send` which can send arbitrary commands to a tmux session via the `par_send_command` tool. This poses a significant security risk as it allows for remote code execution if an AI agent (or a malicious actor interacting with it) is permitted to send unverified commands. While other `execSync` calls are used with inputs derived from Zod-validated strings, the direct command injection potential through `par_send_command` is critical. The server interacts with the local file system extensively for worktree management and configuration file copying, requiring high trust in the execution environment.