Readme Generator Ai MCP Server

This MCP server implements a README generator with rate-limiting and tiered authentication via a shared auth middleware. However, there are significant security concerns: the server depends on an external auth_middleware module loaded via a custom sys.path insertion that assumes a specific directory structure (~/.meok-labs-engine/shared), creating a fragile dependency and potential supply chain risk. Additionally, the server stores API keys and usage data in the user's home directory without encryption, rate-limit tracking uses simple hashing without cryptographic keying, and the implementation lacks input validation for several parameters. While the tool operations themselves are read-only and relatively safe, the authentication/authorization layer has weaknesses that reduce confidence in the overall security posture. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.