mcp-skills-server

The server primarily operates locally, interacting with the file system and Git. Input validation for knowledge names (kebab-case pattern) helps prevent directory traversal. `pyyaml.safe_load` is used for parsing knowledge files, mitigating YAML-related vulnerabilities. `pickle.load` is used for the embedding cache; while a known risk, it's mitigated here as the cache file is internally generated and its integrity is checked against a hash of the knowledge directory content. macOS-specific dialogs use AppleScript with input escaping (`_escape_applescript`) to prevent injection. Git operations (commit, push) are handled with `gitpython`, including mechanisms to prevent or resolve conflicts (rebase). The server requires a trusted Git repository and user interaction for `create`/`update` tools, making it generally safe for its intended use within a developer's environment.