Back to Home
phisad icon

langchain-research-assistant

by phisad

Overview

A system where an LLM can query local research papers/notes through a custom MCP server.

Installation

Run Command
resi --start-server

Environment Variables

  • agent_model

Security Notes

The `read_pdf` tool uses `Path.cwd() / file_name` without proper sanitization of `file_name`. This creates a path traversal vulnerability where an attacker, through LLM prompt injection, could craft `file_name` (e.g., `../sensitive_file.txt`) to read arbitrary files on the system that the running process has permissions to access, as long as the file exists and is recognized as a PDF (the suffix check is simple and could potentially be bypassed or irrelevant if the goal is to read non-PDFs).

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassHigh
Avg Tokens20000
Stars0
Forks0
Last Update2026-01-18

Tags

langchainresearchassistantLLMPDF