meilisearch-documentation-mcp

The `read_resource` function, when handling a resource URI, uses `pathlib.Path` to combine the `repo_path` (local repository clone directory) with `doc_path` (extracted from the URI, which can contain user-controlled input and is URL-decoded). This is vulnerable to path traversal attacks (e.g., `meilisearch-docs://../../../../etc/passwd`), potentially allowing an LLM or malicious user to read arbitrary files on the host system. Although `pathlib.Path` handles `..` sequences, it does not prevent resolving paths outside the intended base directory. Additionally, the system relies on Git cloning and local file system operations, and while configurations are via environment variables, general host filesystem access should be considered when deploying.