This server runs locally over stdio and only touches files the calling agent names. It never opens network connections.

If you find a way for a crafted project file or media file to make the server write outside the target project file, or otherwise misbehave, please open a private security advisory on GitHub (Security tab, "Report a vulnerability") rather than a public issue.