faf-mcp

The `PathValidator` in `src/handlers/fileHandler.ts` proactively prevents path traversal and access to forbidden system directories, and enforces file size limits. While core functionalities are natively implemented in TypeScript (avoiding shell execution), a fallback mechanism in `src/handlers/engine-adapter.ts` uses `child_process.exec` for non-bundled commands. This fallback includes argument sanitization (`sanitizedArgs`) to mitigate injection risks, but shell execution always carries inherent risks. The `http-sse` transport defaults to listening on `0.0.0.0` with `cors` enabled for all origins, which is a permissive network configuration, common for dev tools but a consideration for broader exposure.