mcp-stata

The `run_command` tool directly executes arbitrary Stata code provided by the LLM. Stata itself has capabilities to execute shell commands (e.g., `shell rm -rf /` or `! rm -rf /`), which means an uncontrolled LLM could potentially lead to arbitrary operating system command execution on the host machine. The `run_do_file` and `load_data` functions also introduce risk by executing external scripts or loading data from potentially untrusted paths/URLs, but the direct command injection via `run_command` is the most critical concern. Without strong LLM guardrails or execution within an isolated sandbox (like a container with restricted privileges), running this server is risky.