research-zine-generator

The project uses environment variables for sensitive API keys, implements robust path validation to prevent directory traversal attacks (ensuring all file paths are within a defined 'MCP_ROOT'), and explicitly disallows potentially dangerous tools within the AI agent's configuration. It logs to stderr to prevent stdout corruption. The use of FastMCP and its underlying subprocess execution for servers is expected, and the commands invoked are for known Python/Node.js scripts within the project. The primary risk would be if the underlying MCP server scripts (e.g., Typst or image processing) were compromised or given arbitrary shell access, but the provided code shows good confinement practices.