workademy-mcp-server

CRITICAL: The server's authentication mechanism for obtaining an access token uses a hardcoded Basic Authentication credential ('Basic c3lzdGVtOkViNFRRaXpEdFlpYndJTHI=' which decodes to 'system:Eb4TQizDtYibwILr'). This static, hardcoded system credential is a severe security vulnerability, as it is exposed in the source code and could be exploited to compromise the token issuance process or gain unauthorized access if not properly secured on the Workademy API side. Additionally, the server interacts with the local file system (using `fs/promises` and `path`) to save and analyze CSV reports in a Claude-specific temporary directory, which introduces a potential vector for file system manipulation if not handled robustly.