Word AI MCP Server

What the code does

We read the source, 20 h ago · rules 3dff92dd89df

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

            proc = subprocess.run(

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

  const proc = childProcess.spawnSync(command, args, {

    const exe = path.join(nativeRoot, rid, nativeExecutableName(rid));

    subprocess.check_call(

            __import__(module_name)

  <script src="https://appsforoffice.microsoft.com/lib/1/hosted/office.js"></script>

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

      - name: Create or update GitHub release asset
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.