MCP-CODEGEN

The MCPAdapter and RawMCPClient components use Node.js `child_process.spawn` to execute commands and arguments defined in configuration files (e.g., `command: 'npx'`, `args: [...]`). If an attacker can inject or modify a configuration file, they could execute arbitrary code on the host system. The project explicitly states, 'No sandboxing: Generated code runs with full privileges' and lists sandboxing as a planned feature, indicating a known critical risk. While authentication for external APIs uses environment variables, the ability to run arbitrary child processes from configuration is a significant vulnerability for an AI agent tool.