github · MiniMax-MCP7b4d707812f9

Network / IO / subprocess call without an explicit timeout. A malicious or hung upstream (HTTP host, socket peer, child process) can pin threads, exhaust connection/process pools, and make the MCP server unresponsive. Always pass a bounded timeout. v2 extends v1 with subprocess coverage (R03 from the legacy readiness audit).

output_path.parent.mkdir(parents=True, exist_ok=True)

        with open(output_path / output_file_name, "wb") as f:

            f.write(requests.get(response_data.get("demo_audio")).content)

        return TextContent(

            type="text",

Network / IO / subprocess call without an explicit timeout. A malicious or hung upstream (HTTP host, socket peer, child process) can pin threads, exhaust connection/process pools, and make the MCP server unresponsive. Always pass a bounded timeout. v2 extends v1 with subprocess coverage (R03 from the legacy readiness audit).

# step1: upload file

        if is_url:

            # download file from url

            response = requests.get(file, stream=True)

            response.raise_for_status()

            files = {'file': ('audio_file.mp3', response.raw, 'audio/mpeg')}

            data = {'purpose': 'voice_clone'}

Network / IO / subprocess call without an explicit timeout. A malicious or hung upstream (HTTP host, socket peer, child process) can pin threads, exhaust connection/process pools, and make the MCP server unresponsive. Always pass a bounded timeout. v2 extends v1 with subprocess coverage (R03 from the legacy readiness audit).

output_file_name = build_output_file("video", task_id, output_path, "mp4", True)

        output_path.parent.mkdir(parents=True, exist_ok=True)

        video_response = requests.get(download_url)

        video_response.raise_for_status()

        with open(output_path / output_file_name, "wb") as f:

Network / IO / subprocess call without an explicit timeout. A malicious or hung upstream (HTTP host, socket peer, child process) can pin threads, exhaust connection/process pools, and make the MCP server unresponsive. Always pass a bounded timeout. v2 extends v1 with subprocess coverage (R03 from the legacy readiness audit).

output_file_name = build_output_file("image", f"{i}_{prompt}", output_path, "jpg")

            output_path.parent.mkdir(parents=True, exist_ok=True)

            image_response = requests.get(image_url)

            image_response.raise_for_status()

            with open(output_file_name, 'wb') as f:

Network / IO / subprocess call without an explicit timeout. A malicious or hung upstream (HTTP host, socket peer, child process) can pin threads, exhaust connection/process pools, and make the MCP server unresponsive. Always pass a bounded timeout. v2 extends v1 with subprocess coverage (R03 from the legacy readiness audit).

output_file_name = build_output_file("video", task_id, output_path, "mp4", True)

        output_path.parent.mkdir(parents=True, exist_ok=True)

        video_response = requests.get(download_url)

        video_response.raise_for_status()

        with open(output_path / output_file_name, "wb") as f:

Network / IO / subprocess call without an explicit timeout. A malicious or hung upstream (HTTP host, socket peer, child process) can pin threads, exhaust connection/process pools, and make the MCP server unresponsive. Always pass a bounded timeout. v2 extends v1 with subprocess coverage (R03 from the legacy readiness audit).

)

def play_audio(input_file_path: str, is_url: bool = False) -> TextContent:

    if is_url:

        play(requests.get(input_file_path).content)

        return TextContent(type="text", text=f"Successfully played audio file: {input_file_path}")

    else:

        file_path = process_input_file(input_file_path)