a4e-mcp-server

The server's core function involves executing developer-provided Python code (tools) and generating files, which is an intentional design. It includes a `sanitize_input` function to prevent template injection for agent metadata. `subprocess.run` with `shell=True` is used in `dev_manager.py` for system cleanup commands (e.g., `lsof`, `kill`, `pkill ngrok`), but the inputs to these commands are derived from trusted system outputs or are fixed strings, reducing the risk of direct arbitrary command injection from external users. The `ngrok` authentication token is passed as a distinct argument in a `subprocess` call, not via `shell=True`, making it safe from shell injection.