py2to3mcp

The servers expose powerful file system and code execution capabilities. The `filesystem_server` allows reading and writing arbitrary files/directories (within process permissions and defined limits). The `py2to3_server` uses `subprocess.run` to execute external `2to3` or `fissix` commands for code transformation. While these are legitimate tools, the use of `subprocess` and broad file system access introduces a risk vector. A compromised or malicious calling agent could potentially misuse these tools to read/write sensitive files or execute arbitrary code on the host system. Internal `eval` is not present in server logic, only shown in a Python 2 example.