read-github

Warn

Audited by Runlayer on Feb 23, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
2
Flagged
1
Chunks
2
Flagged Files (1)
scripts/gitmcp.pyHIGH
78.3%

Malicious tool definition detected

- gitmcp only needs owner/repo url = re.sub(r'/(tree|blob|commits|releases|issues|pull|actions|wiki|settings)/.*$', '', url) return url # Handle owner/repo format (possibly with extra path segments) if "/" in url_or_path and not url_or_path.startswith("http"): # Extract just owner/repo, strip any extra paths parts = url_or_path.split('/') if len(parts) >= 2: return f"https://gitmcp.io/{parts[0]}/{parts[1]}" return f"https://gitmcp.io/{url_or_path}" return url_or_path def get_repo_name_from_url(u

Passed Files (1)Click to expand
SKILL.mdOK
23.6%

Tool passed security scan

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
2
Files Flagged
1
Chunks Analyzed
2
Analyzed
Feb 23, 2026, 05:49 AM
Security Audit — runlayer — read-github