mcp-orchestrator

The project uses a secure sandboxed `vm` environment for executing LLM-generated TypeScript code. Dangerous Node.js globals (`process`, `require`, `__dirname`, `__filename`, `global`, `Buffer`, `module`, `exports`) are explicitly blocked. Execution includes a configurable timeout. All external interactions (e.g., file system, network) must occur through registered MCP tools, which can be controlled and audited. The `SamplingSecurityManager` further enhances security by implementing approval workflows, rate limiting, and policy enforcement for LLM sampling requests, ensuring human-in-the-loop oversight for sensitive operations. No direct `eval` calls in critical paths were found, and code is compiled into a script for execution. The overall design prioritizes secure execution of untrusted code.