AI-Prompt-Guide-MCP

The server heavily relies on local file system operations. Robust path sanitization, validation (e.g., `DANGEROUS_CHARS_REGEX`, `MAX_PATH_LENGTH`, `PATH_TRAVERSAL` checks), and a security audit logger (`SecurityAuditLogger`) are implemented in `src/fsio.ts` to mitigate path traversal and other file-related risks. No `eval` or direct network vulnerabilities found in core logic. `fetch` is used by documented tools (`fetch-markdown`, `fetch-raw-html`) which agents could potentially call. Internal use of `bypassValidation: true` in `fsio` is acceptable given prior path sanitization layers. The system's operation is confined to the local file system within a defined workspace.