Filesystem helpers can accidentally escape intended directories.
MCPAI SECURITY ENGINEERING
Filesystem sandboxing
File tools need canonical path validation, symlink handling and OS-level containment—not string-prefix checks alone.
A project-file tool follows a symlink outside the project root.
Which security control should be explicit?
REMEMBERValidate the resolved resource, not only the requested path.
No uploads · No company data · No account required