mcp-server-computer-study

The server implements robust multi-layered security for database operations, including a business-layer SQL validator and a Druid SQL firewall, explicitly blocking write/DDL operations and SQL injection vectors. File path validation prevents path traversal attacks during CSV export. CSDN API authentication secrets (cookies, x-ca-* headers) are externalized to local files and environment variables, avoiding hardcoding. The `ComputerService` executes fixed system commands (`systeminfo`, `system_profiler`, `lshw`) which inherently carry environmental risks but are not directly exploitable via user input in this implementation. The default 'admin'/'admin123' credentials for the Druid monitoring page are a minor weakness, though the web server and thus the monitoring UI are disabled by default in `application.yml` for MCP server's STDIO communication model.