During this period, contributed backend security enhancements across two Python repositories, focusing on robust input validation and access control. In dataease/sqlbot, implemented upload access restrictions to ensure only authorized users could perform file uploads, reducing the risk of remote code execution while also refining decorator usage for more reliable processing. For 1Panel-dev/MaxKB, addressed command injection vulnerabilities by integrating a validation step for MCP transport using ToolExecutor’s validation method, ensuring safer command handling. The work emphasized API development and backend security best practices, delivering targeted improvements that strengthened the overall security posture without introducing new bugs or regressions.