MCPServers

The server uses `fs.readFileSync` with `path.resolve` on user-provided `imagePath` for editing. While intended for local user files, this pattern could be exploited as a Local File Inclusion (LFI) vulnerability if the AI agent supplying the path is malicious or buggy, allowing it to read arbitrary files accessible by the server process. No explicit path validation or sandboxing beyond `path.resolve` is present. `GEMINI_API_KEY` is correctly handled via environment variables, not hardcoded. Output files are saved to a dedicated directory `~/Documents/nanobanana_generated/`.