datasheet-to-md-mcp

The server uses standard I/O for communication (stdio transport) and relies on robust Go libraries for PDF parsing and image processing. Path handling for input and output directories utilizes `filepath.Clean` and `filepath.Join`, mitigating simple path traversal vulnerabilities. Resource limits for image processing are in place to prevent memory exhaustion. There is no direct execution of arbitrary commands or `eval`-like patterns observed. Configuration is loaded from environment variables, which is a secure practice, provided the environment variables themselves are managed securely during deployment. The primary security risk would come from misconfiguring `PDF_INPUT_DIR` or `OUTPUT_BASE_DIR` to sensitive file system locations.