ep2-filebridge

The server implements strong path sanitization (`safePath()`) to sandbox all file operations to a specific root directory (`/home/jim00/ep2` by default), preventing arbitrary file system access. It does not use `eval()` or direct `child_process.exec()` on user input. It relies on `simple-git` for Git operations, which generally handles command arguments safely, minimizing shell injection risks. The primary remaining risk is the inherent privilege of offering file and Git access, which requires trust in the consuming AI agents and robust input validation, or a potential exploit within `simple-git` or the Node.js `fs` module itself. The MCP-SSE server sets `Access-Control-Allow-Origin: *`, which is typical for SSE but means any origin can connect to the SSE endpoint.