defuddle-fetch-mcp-server

CRITICAL RISK: The server fetches arbitrary URLs provided by the LLM (`fetch(args.url)`) without sufficient validation or network egress filtering. This makes it vulnerable to Server-Side Request Forgery (SSRF) attacks. An LLM could be prompted to access internal network resources (e.g., `http://192.168.1.100`), local files (e.g., `file:///etc/passwd`), or use the server as a proxy for malicious external requests. While `z.string().url()` validates the URL *format*, it does not prevent access to sensitive schemas or private IP ranges. Additionally, the `raw` parameter allows returning raw HTML, which could potentially expose the LLM or its downstream consumers to XSS if not properly sanitized on the client side, though the primary server-side risk is SSRF.