wcgw

The server is designed to execute arbitrary shell commands and perform file modifications, which are inherently high-privilege operations. The BashCommand tool allows for execution of any command, posing a significant risk if commands are not carefully reviewed. The README.md explicitly warns against allowing BashCommand without review, as it may result in data loss. The system uses subprocess.run and pexpect.spawn for shell execution. File editing tools also have access to the local filesystem. Internal code uses `eval` for dynamic prompt setting, but within a controlled context and not exposed to arbitrary user input. The server communicates over standard I/O, reducing traditional network attack surface.