Is Byteask Embedded MCP server safe?

An MCP server entry launches a command on your host.

"command": "uv",

Why it matters: Trusting the manifest means running that binary — verify what it is and where it comes from.

Fix: Verify the launched command and its source before trusting this MCP server configuration.

The component can run operating-system commands or spawn processes.

subprocess.run(["ffmpeg", "-y", "-v", "error", "-i", os.path.join(tmp, "f%04d.png"),
                        "-vf", "palettegen=max_colors=128:stats_mode=diff", pal], check=True)

subprocess.run(["ffmpeg", "-y", "-v", "error", "-framerate", str(FPS),
                        "-i", os.path.join(tmp, "f%04d.png"), "-i", pal,
                        "-lavfi", "paletteuse=dither=bayer:bayer_scale=3", "-loop", "0", OUT], c …

Why it matters: Powerful and often legitimate — confirm the commands aren't built from untrusted input.

Fix: Confirm the command and its arguments are fully controlled and not derived from untrusted input; avoid shell=True.

The component writes or deletes files on disk.

shutil.rmtree(tmp, ignore_errors=True)

Why it matters: Usually legitimate, but worth confirming the paths can't be controlled by untrusted input.

Fix: Confirm which files are written/deleted and that paths cannot be influenced by untrusted input.

An MCP tool surface (manifest or tool definitions) was found.

"mcpServers": {

{

{

mcp = FastMCP(

@mcp.tool(description=SEARCH_DOCS_DESCRIPTION)

@mcp.tool()

@mcp.tool(description=REQUEST_DOCUMENT_DESCRIPTION)

Why it matters: Just context — review which tools it offers and their permissions.

Fix: Review the declared MCP tools and their permissions.