Project .mcp.json executes commands without trust confirmation

[menelausx]

A repository-controlled .mcp.json is loaded automatically when MiniCode starts. Local MCP commands are spawned immediately without repository trust confirmation or command approval.

This means running minicode inside an untrusted repository can result in arbitrary code execution before the user sends any message.

[GateJustice]

Thank you for the detailed report. We’ll investigate this issue immediately and verify the potential impact. If confirmed, we’ll treat it as a high-priority security issue and work on a fix as quickly as possible. We appreciate your responsible disclosure.