image-gen-mcp-server

The server demonstrates robust security practices for its domain. It includes comprehensive input validation (prompt length up to 4000 characters, image buffer size up to 10MB), API key validation (checking for placeholders and minimum length), and rate limiting (10 requests/min/provider). Resource management is handled with AbortController for timeouts and automatic cleanup of temporary files older than 1 hour. Sensitive data is sanitized in logs. No 'eval' or explicit malicious patterns were found. While `IMAGE_OUTPUT_DIR` allows custom paths, the use of `fs.writeFile` to specific file paths (often within secure temp directories or newly created project subdirectories) rather than arbitrary execution mitigates risks. Overall, it appears safe to run with properly configured environment variables.