avatar-renderer-mcp

The system heavily relies on `subprocess` calls (e.g., `ffmpeg`, `mfa`) and dynamic module loading for external AI models. While essential for its functionality, these mechanisms could pose a risk if input paths or data were maliciously crafted by an attacker; however, the codebase appears to primarily use internally generated or validated file paths, mitigating direct user-controlled exploits. Network communication to the Chatterbox TTS server is to a configurable URL, defaulting to `localhost`, reducing external network exposure risks. File uploads are directed to unique, UUID-named temporary directories, preventing common path traversal vulnerabilities.