viberag

The server uses local IPC (Unix sockets/named pipes) for client communication, limiting network exposure. API keys for cloud embedding providers are loaded from a local configuration file (.viberag/config.json) which is designed to be `.gitignore`-ed, preventing accidental exposure in source control. No direct usage of 'eval' or other highly dynamic code execution methods was found for processing external input. File system operations are scoped to the project root, and `.gitignore` is honored for exclusions. The system relies on external cloud services for embedding if configured, which introduces a dependency on the security of those providers.