taiga-ui-mcp

The server fetches documentation content from a user-provided URL (via `--source-url` argument or `SOURCE_URL` environment variable). While the server itself does not execute code from this source, an untrusted or malicious source could potentially supply extremely large or malformed data, which could lead to resource exhaustion or unexpected parsing behavior. However, the parsing logic (in `parseContent`) is simple, primarily extracting markdown headers and basic metadata, minimizing the risk of code injection. The server communicates via standard I/O (stdio), reducing external network attack surfaces. No `eval` or `child_process` usage was found.