Question: Is it safe to let Workix download adapter modules?
Answer: An adapter is executable code running inside the MCP process, so Workix constrains it: downloads are limited to https hosts on an allowlist (workix.co plus the registry host, overridable via WORKIX_MCP_TRUSTED_HOSTS), each artifact's sha256 is verified against the registry before use, and download size is capped.