root-mcp

The server includes robust `PathValidator` for file access, enforcing `allowed_roots`, preventing path traversal, and validating write operations. Remote file access is disabled by default. However, the `core.operations.basic_stats` module uses Python's `eval()` function for processing user-defined expressions (`selection`, `defines`). While `eval()` is restricted to a limited `numpy` namespace and an empty `__builtins__` dictionary to mitigate arbitrary code execution, it remains a less secure approach compared to the `ast`-based `SafeExprEvaluator` used in the `extended` mode's `analysis.operations` module. Users should configure `allowed_roots` carefully to prevent unintended file access.