lkml-mcp

The server makes HTTP requests to lore.kernel.org using the `requests` library. Message IDs are sanitized by stripping angle brackets before being used in URLs and as parts of temporary filenames, mitigating direct path traversal or URL injection. Temporary `.diff` files are created in `/tmp/lkml-mcp`, derived from email content. While the server itself doesn't execute these files, large or malformed content in `diff_text` could theoretically cause issues for external tools processing these files, but this is an indirect risk. No 'eval', 'exec', or direct shell execution with user input is observed. The base URL is configurable via environment variable, allowing a user to point to an untrusted source, but the default `lore.kernel.org` is secure.