ai_summarizer_context

The application's `config.json` allows specifying arbitrary commands and arguments for MCP servers, which are then executed via `subprocess.Popen`. If the `config.json` is compromised or manipulated (e.g., by malware on the local machine), this mechanism could be exploited to run malicious code. The default `npx @modelcontextprotocol/server-filesystem` command also introduces a supply chain risk by downloading and executing code from npm. While intended for local tooling, the ability to execute arbitrary commands from a configuration file represents a significant security vulnerability if not carefully managed by the user.