# source -- query taken directly from caller, no validation
def search tools(self, query: str) -> List[ToolInfo]:
  import re

# sink -- compiled and applied with no timeout or exception handling
  pattern = re.compile(query, re.IGNORECASE)
  for tool in self.get all tools():
    if pattern.search(tool.name) or pattern.search(tool.hint):
      matches.append(tool)

# tested on: praisonai==1.5.87 (source install)
# install: pip install -e src/praisonai
import sys, time, json
sys.path.insert(0, 'src/praisonai')
from pathlib import Path

mcp dir = Path.home() / '.praison' / 'mcp' / 'servers' / 'test server'
mcp dir.mkdir(parents=True, exist ok=True)
(mcp dir / ' index.json').write text(json.dumps([
  {"name": "a" * 30 + "!", "hint": "a" * 30 + "!", "server": "test server"}
]))
(mcp dir / ' status.json').write text(json.dumps({
  "server": "test server", "available": True, "auth required": False,
  "last sync": time.time(), "tool count": 1, "error": None
}))

from praisonai.mcp server.tool index import MCPToolIndex
index = MCPToolIndex()

start = time.monotonic()
results = index.search tools("(a+)+$")
print(f"Returned in {time.monotonic() - start:.1f}s")
# expected output: Returned in 376.0s