SammelsuriumMCP

The `read_file` tool allows reading arbitrary files from the configured `DOCUMENT_ROOT` (default: `/documents`). In the provided Docker setup, this maps to a host directory (`/Users/markus/Documents`), which means a malicious actor could potentially read sensitive files within that host directory if the filename is known or guessed. The `LLM_API_KEY` is hardcoded to 'lm-studio' in `utils/config.py`; while this is common for local LLM setups, it's a security risk if the LLM_URL is changed to a public API requiring a real API key. Web searches fetch content from arbitrary URLs, which is inherent to the RAG design but carries standard risks of processing potentially malicious web content, though `BeautifulSoup` helps mitigate some client-side exploits.