If you discover a security vulnerability, please report it responsibly:

1. Do not open a public GitHub issue
2. Email the maintainer or use GitHub's private vulnerability reporting
3. Include steps to reproduce and potential impact

We will acknowledge your report within 7 days and aim to release a fix promptly.

This MCP server executes ExtendScript code inside Adobe Illustrator via osascript. Key security considerations:

• File system access: The server reads/writes temporary files and can export to user-specified paths
• No network access: The server does not make network requests
• Local only: Designed to run locally via stdio transport, not over a network