cortex-mcp-server

The application uses environment variables for sensitive API keys (OpenAI, Supabase) and initializes clients lazily, which are good practices. There's no evident use of 'eval' or direct arbitrary code execution. Database interactions use the Supabase client library, which is generally expected to handle parameterization and prevent basic SQL injection for queries and inserts. The `ilike` pattern in `search_text` passes user input directly; while Supabase client usually handles this, it's a point where a very sophisticated payload *could* potentially cause issues if not fully escaped by the library (though unlikely for typical `ilike` usage). Overall, appears reasonably secure for a Python application using modern client libraries.