presearch-search-api-mcp

The `ContentFetcher` (used for scraping) launches Puppeteer with `--no-sandbox` and `--disable-setuid-sandbox` flags. Disabling the browser sandbox is a critical security vulnerability, as it removes a key layer of isolation and protection against malicious web content. If a scraped webpage contains an exploit, it could potentially escape the browser and gain access to the host system. While running in a Docker container (as suggested by `docker-compose.yml`) provides some isolation, `--no-sandbox` still significantly increases the risk within the container itself. There are no other immediate `eval` or direct arbitrary command execution from user input, and secrets are handled via environment variables, but the Puppeteer configuration is a major concern.