mcpm

The tool's core functionality involves downloading and executing arbitrary code (MCP servers) from user-specified or inferred repositories. This is an inherent risk for any package manager. Specifically, the `internal/builder/shell.go` executes build commands using the user's shell (`zsh -l -c command` or `bash -l -c command`), which can be more susceptible to shell injection if the command strings themselves were derived from untrusted, unsanitized user input. The `mcpm add` command allows direct registration of arbitrary commands and arguments for MCP servers. While this is an intended feature, it means the security responsibility lies entirely with the user to ensure the commands and repositories they instruct `mcpm` to handle are trusted. No direct hardcoded secrets or obfuscation were identified within the provided source code, but the execution of untrusted external code remains a significant vector for security compromise.