code-screenshot-mcp

CRITICAL security risks identified. The server allows reading arbitrary files from the file system (via `screenshot_from_file` and `batch_screenshot` tools) and executing shell commands (via `screenshot_git_diff` tool) based on user-provided file paths. This can lead to severe information disclosure (e.g., reading sensitive system files like `/etc/passwd` or SSH keys) and potential arbitrary code execution via shell injection in the `git diff` command, even with basic quoting. Running this server with untrusted input (such as from an LLM that might be prompted maliciously) is highly dangerous and could compromise the host system.