filesystem-frontmatter-mcp

The server employs robust path validation using `Path.resolve()` and `Path.relative_to(base_dir)` to prevent directory traversal attacks, ensuring all file operations are constrained to the configured `FRONTMATTER_BASE_DIR`. No hardcoded secrets or obvious malicious patterns were found. The primary security consideration is the `query` tool, which accepts arbitrary DuckDB SQL. While DuckDB operates in-process and primarily on local data within the defined base directory, allowing unvalidated SQL from an untrusted client could potentially expose local system information or be misused for local file manipulation within the DuckDB execution context. However, for a trusted developer environment, this provides flexibility. Semantic search involves downloading models from external sources (e.g., HuggingFace), which assumes the integrity of those sources.