n1ght-mcp

CRITICAL RISK: The `n1ght_data_*` tools accept `filePath` as a direct input parameter, which is then used in `fs.readFile` and `fs.writeFile` operations without explicit path sanitization or containment checks (e.g., ensuring `filePath` is within `process.cwd()`). This creates a path traversal vulnerability, allowing a malicious AI agent to potentially read from or write to arbitrary locations on the host file system (e.g., `../../etc/passwd`). While the `gemini` and `codex` CLI calls escape prompts before passing them to `spawn` with `shell: true`, the general use of `shell: true` can still introduce risks if underlying CLI tools have their own vulnerabilities or if argument handling is not perfectly robust. Additionally, downloading binary models from HuggingFace (`node-llama-cpp`) introduces a supply chain risk, as a compromised model could execute malicious code.