Ci Cd Generator Ai MCP Server

This MCP server has critical security vulnerabilities that make it unsuitable for production use. The server depends on an external authentication middleware from a hardcoded local path (`~/clawd/meok-labs-engine/shared/auth_middleware`) that is not included in the repository, making the authentication system non-functional and unverifiable. Additionally, the code imports and executes this external module without any validation, creating a supply chain risk. The rate-limiting implementation is ineffective (in-memory, resets on restart), and the server has no validation of user-provided inputs in pipeline configurations. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.