seed-mcp-server

The server's SDK provides powerful capabilities to interact with and manage Docker containers, including creating/destroying containers, running arbitrary commands inside them via `Node.runCommand`, and copying files to/from containers. These operations inherently carry high security risks. If the server is exposed without robust authentication, authorization, and input sanitization, it could enable remote code execution within containers or potentially lead to host compromise via Docker API abuse or container escape vulnerabilities. The `Node.runCommand` method is a direct command execution interface and susceptible to injection attacks if input is not carefully sanitized. Additionally, the comments about file copy code being 'generated by AI, not tested yet' indicate potential for undiscovered bugs or vulnerabilities in those critical functions.