copilot-security-instructions

The server uses an Express.js application and delegates core Model Context Protocol (MCP) handling to the `@modelcontextprotocol/sdk`. Input validation for retrieving prompts (`get_prompt` tool) uses `zod` and `z.enum(Object.keys(prompts))` which prevents path traversal and arbitrary file reads, a strong security practice. Configuration for sensitive data like AMQP credentials and SSL PFX passphrases are sourced from environment variables, which is appropriate. The `reqInfo` middleware logs the full `req.body`, which could expose sensitive data in logs if the logger is enabled and misconfigured. However, console and AMQP logging are disabled by default. No `eval` or other direct code execution vulnerabilities were found in the provided server code.