pysr-mcp-server

The server uses Python's `pickle` module for saving and loading PySR models. `pickle` is known to be insecure against maliciously constructed data, which could lead to arbitrary code execution if a loaded model file is untrusted or tampered with. While the server generates these files internally, a compromised file system could exploit this. The Node.js wrapper utilizes `child_process.spawn` to execute Python scripts, but input sanitization and path management appear to be handled carefully by internal logic, reducing direct command injection risk. For other components in the repository (like `app_server.py`, which is not the MCP server itself), a hardcoded fallback `SECRET_KEY` poses a critical vulnerability if deployed in production without modification.