arxiv-mcp-server

The source code does not contain 'eval' or obvious malicious patterns. Input validation through JSON schemas for MCP tools is a good practice. It interacts with the public arXiv API using httpx for HTTP requests and xml.etree.ElementTree for XML parsing. While parsing external XML always carries a minimal inherent risk, ElementTree is generally robust against common XML vulnerabilities. No hardcoded secrets were found. The 'AI assistant' features described in the README are not fully implemented in the provided source code snippets, which currently use existing paper abstracts for 'summaries' rather than generative AI.