image-gen-mcp

The `DiffusionLatentHacker` module uses Python's `pickle` library to serialize and deserialize `LatentState` objects to and from disk cache. Deserializing pickled data from an untrusted source can lead to arbitrary code execution. While the cache directory is managed locally by the agent, a compromise of this directory by an external attacker could pose a significant risk. Additionally, the `dspy_prompter.py` module uses an `OLLAMA_HOST` environment variable, defaulting to localhost. If configured to point to an unauthenticated public Ollama endpoint, this could be abused, though this is a configuration rather than a code vulnerability.