jellyseerr-mcp

The presence of the `get-pip.py` file, which is largely obfuscated (using base85 encoding) and performs complex system-level operations (like monkeypatching pip internals), significantly raises security concerns. While it might be the official get-pip script, its direct inclusion and obfuscation within the project's source code make it difficult to audit and introduces a large, opaque attack surface. Additionally, the `raw_request` tool allows LLMs to perform arbitrary HTTP methods (GET, POST, PUT, DELETE) against any endpoint of the configured Jellyseerr API, which could be abused to trigger unintended actions or retrieve sensitive data if the LLM client is compromised or poorly constrained.