mcp_servers

The `run_query` tool directly accepts raw SQL as input, which is a significant SQL injection vulnerability if exposed to untrusted user input or if an LLM generates malicious SQL. The `list_tables` and `describe_table` tools use f-strings to embed `schema` and `table` names directly into SQL queries, also creating SQL injection opportunities if these parameters are not rigorously sanitized by the calling agent or application. The `query_vectorstore` tool similarly uses f-strings for the `query` parameter within `plainto_tsquery`, which could lead to unexpected behavior or resource exhaustion with malicious input. While intended for LLM agents, these patterns pose a high risk without strict input validation or sandboxing.