auto-mcp-framework

The project uses `subprocess.run`, `subprocess.Popen`, and `os.execvp` for its core `uvx`-based package isolation feature. This is a security-conscious design choice to run external package analysis in a sandboxed environment, rather than a vulnerability. The LLM is used for generating descriptions, not code, limiting direct LLM-related risks. API keys are handled via environment variables. The tool's primary function is to expose existing Python code; therefore, if a user exposes malicious local code or a compromised installed package, the generated server will inherit that risk. However, the tool itself does not introduce arbitrary `eval` or command injection vulnerabilities from external user input.