mcp-server-collection

The `sd_mcp_server.py` uses `subprocess.Popen` with `shell=True`, which is a security risk if the `SD_LAUNCHER_PATH` variable (though hardcoded/developer-configured) could be manipulated. More critically, the `img2img` and `interrogate_image` functions accept an `image_path` argument from user input and directly attempt to read local files (`os.path.exists` check is insufficient). This allows for arbitrary local file disclosure if a malicious actor can provide a path to an existing file on the server's machine, posing a significant information leakage risk.