nucleotide_archive_mcp

The server primarily acts as an API wrapper for ENA and Europe PMC, using `httpx` for network requests. Query parameters for external APIs are constructed with careful string formatting and explicit quoting for values, reducing typical injection risks within the ENA query language. The `generate_download_script` tool creates bash scripts with `wget`/`curl` and `md5sum`. While the commands themselves are generally safe, the filenames and URLs are derived from ENA API responses. A theoretical risk exists if a compromised ENA API were to return maliciously crafted URLs or filenames that could lead to shell injection in the generated script, but this is a low probability given the nature of ENA. No `eval` or `exec` functions are used, and sensitive information like API keys are expected to be managed via environment variables.