site-fit-mcp-server

CRITICAL: The `sitefit_load_gis_file` tool directly passes a user-controlled `file_path` to `fiona.open` without sanitization. This allows for arbitrary file read vulnerabilities (e.g., path traversal like `../../../etc/passwd`). CRITICAL: The `sitefit_export_pack` tool accepts a user-controlled `output_dir` for writing generated files (e.g., DXF, PDF, CSV). This allows for arbitrary file write vulnerabilities (e.g., path traversal to write to sensitive system directories). LOW RISK: The `rules_override` parameter in `sitefit_generate` is passed to `yaml.safe_load` for merging into the RuleSet. While `safe_load` mitigates many YAML deserialization attacks, it's not entirely immune, especially with older `PyYAML` versions or complex gadget chains. User-controlled input to a YAML parser is generally discouraged if the parser is not fully sandboxed.