opensearch-mcp-server

The source code, specifically `src/mcp.json`, contains hardcoded OpenSearch production-like credentials (URL, username, and password). While this might be intended as an example for VS Code configuration, storing such secrets directly in the repository is a critical security vulnerability if the repository is public or accessed by unauthorized individuals. The application itself relies on environment variables for configuration, which is a better practice, but the presence of this example reduces the overall security posture due to potential misuse. Additionally, `aws-sdk` is `require`d dynamically for AWS authentication but is not listed as a dependency in `package.json`, which could lead to runtime errors in AWS-configured environments.