Git Helper Ai MCP Server

This MCP server has critical security vulnerabilities that make it unsuitable for production use. The server imports an external authentication middleware from a hardcoded local path that is not included in the codebase, making the actual authentication logic unverifiable. Additionally, the code contains a dangerous sys.path manipulation pattern that could facilitate code injection, and the authentication bypass mechanism allows unauthenticated access via empty API keys with rate limiting as the only control. While the git analysis tools themselves are relatively safe, the authentication and dependency handling pose significant risks. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.