GedcomMCP

The server allows loading and saving GEDCOM files to arbitrary paths on the local file system specified by the user. While `validate_gedcom_path` checks for a `.ged` extension and file/directory existence, it uses `Path(file_path).resolve()`, which does not sandbox access to a specific safe directory. This means a malicious actor (or an overzealous AI agent) could instruct the server to read or write any `.ged` file accessible by the server process's user permissions, potentially leading to unauthorized data access or modification outside the intended project directory if the server is not run in a strictly contained environment (e.g., a Docker container with restricted volume mounts, or as a low-privilege user). No hardcoded secrets or 'eval' statements were found.