toolcall

The `McpClient.connect` method in `src/client.ts` uses `child_process.spawn` with an unsanitized `target` string. If this `target` is derived from untrusted user input, it creates a severe command injection vulnerability. The server-side (using `serve`), while robustly validating tool parameters with Zod, does not implement specific mitigations against denial-of-service (DoS) attacks from excessively large or malformed JSON inputs. Furthermore, the overall security highly depends on the safety of the user-provided `execute` functions within the tools, as the framework cannot prevent arbitrary or malicious code within these user-defined functions.