whoosh_rag_mcp

The core Python MCP server (mcp_server.py, doc_retriever.py) does not contain direct `eval`, hardcoded secrets, or network listeners (uses stdio). File operations are limited to configured `DOCS_ROOT` and `INDEX_DIR`. The primary risk lies in the configuration of `DOCS_ROOT` and `INDEX_DIR` environment variables by the host system or AI assistant client; if these point to untrusted or sensitive locations, it could lead to unintended file access or resource exhaustion. The associated VS Code extension uses `child_process.exec` to run the Python script, which is a potential vulnerability if the `pythonPath` configuration is maliciously set by the user, though the script path itself is fixed and arguments for search queries are quoted to mitigate injection.