podman-mcp-server

The server acts as a wrapper for Podman/Docker CLI commands, executing them via `exec.Command` in Go and `childProcess.execFileSync`/`subprocess.run` in Node.js/Python. These methods execute commands with explicit argument arrays, mitigating shell injection vulnerabilities within the server's code. User-supplied arguments for container/image names, paths, ports, and environment variables are passed directly to the underlying container runtime CLI. The primary security consideration is the robustness of the Podman/Docker CLI itself against specially crafted arguments, which is outside the scope of this project's immediate code. No 'eval', obfuscation, hardcoded secrets, or malicious network patterns were found. Network exposure is limited to the configured SSE port for MCP communication.