caniuse-mcp

External API calls directly embed user input (feature name, browserslist query) into URLs without explicit sanitization, posing a potential injection risk to the remote services. Local file access for configuration (browserslistrc, package.json) uses standard path resolution functions, but without explicit input validation or sanitization of `configPath` or `projectPath` parameters, there's a theoretical path traversal risk if these inputs are untrusted. The `session.requestSampling` mechanism sends a constructed prompt to the client's LLM, which could be a prompt injection vector for the client-side model, though the server filters the response for valid feature IDs.