Back to MCP PR Review Pipeline

Security Report

MCP PR Review Pipeline

v1.0.2 v1.0.1
Pass
Version v1.0.2 Scanned 11 May 2026 at 06:31 Scanner v2.8.0

Summary

Detected

  • Services:
  • Permissions: filesystem:read
  • Data Handling:

Undeclared

All items declared

Warnings

No warnings

Findings (2)

Credentials

info env:GITHUB_TOKEN undeclared
credential-env-var
services/github-mcp.md:45

"{GITHUB_TOKEN}"

This file references the environment variable GITHUB_TOKEN. If this is a credential (API key, token, secret), declare it in requires.data_handling.

Permissions

info filesystem:read declared
mcp-file-read
services/github-mcp.md:57

"get_file_contents"

This content references filesystem read access. If intentional, declare filesystem:read in requires.permissions.