che-pdf-mcp

The `pdf_url_fetch` tool allows fetching PDFs from arbitrary URLs (`URLSession.shared.data(from: url)` without host validation or allowlist checks). This could be abused for Server-Side Request Forgery (SSRF) or to download malicious files from untrusted sources, potentially exposing the host system. The `PDFError.hostNotAllowed` is defined but not implemented for host validation. File write operations for outputs like merged PDFs, extracted images, or saved documents could lead to arbitrary file writes if the `output_path` or `output_directory` parameters are not properly sanitized or restricted by the calling environment. No `eval` or dynamic code execution found.