read-github
Warn
Audited by Runlayer on Feb 23, 2026
Risk Level: MEDIUM
Scan Summary
Flagged Files (1)
scripts/gitmcp.pyHIGH
78.3%
Malicious tool definition detected
- gitmcp only needs owner/repo url = re.sub(r'/(tree|blob|commits|releases|issues|pull|actions|wiki|settings)/.*$', '', url) return url # Handle owner/repo format (possibly with extra path segments) if "/" in url_or_path and not url_or_path.startswith("http"): # Extract just owner/repo, strip any extra paths parts = url_or_path.split('/') if len(parts) >= 2: return f"https://gitmcp.io/{parts[0]}/{parts[1]}" return f"https://gitmcp.io/{url_or_path}" return url_or_path def get_repo_name_from_url(u
Passed Files (1)Click to expand
SKILL.mdOK
23.6%
Tool passed security scan
Audit Metadata