KiCAD-MCP-Server

The server uses `child_process.spawn` in TypeScript to invoke a Python script, and the Python backend then uses `subprocess.run` (or similar) to execute `kicad-cli` commands. Multiple tools (e.g., `export_gerber`, `export_pdf`, `run_drc`) pass user-supplied parameters (`outputDir`, `outputPath`, `reportPath`) to these shell commands. If these parameters are not rigorously sanitized and escaped before interpolation into the shell command string, this creates a potential for command injection vulnerabilities. For instance, providing a malicious path like `'my_output && rm -rf /'` could execute arbitrary commands on the host system. The code snippets provided do not explicitly show robust input sanitization for these shell executions.