pythia-mcp

The server demonstrates strong security practices for input validation, path traversal prevention (`safeResolvePath`), XML injection (`escapeXml`), and Regex DoS (`safeRegex`). External API calls to HEPData and CERN Open Data are rate-limited and use hardcoded base URLs with `encodeURIComponent` for query parameters, mitigating SSRF. The primary risk vector would be vulnerabilities within the underlying Lilith Python library itself, especially concerning its XML parsing, but the Node.js wrapper diligently sanitizes and constrains inputs to the Python subprocess calls. No obvious hardcoded secrets or arbitrary code execution vulnerabilities were found in the Node.js layer.