MCP server for GitHub project management
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 67469fb · analyzer v28 · 15h ago
skills & prompt files 3
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 35
filesystem 1
- fs giantswarm-pro-67469fb/src/lib/version.js :8
import { readFileSync } from 'node:fs';
shell / exec 1
- shell giantswarm-pro-67469fb/src/lib/selfupdate.js :11
import { execFileSync } from 'node:child_process';
network 2
- net giantswarm-pro-67469fb/src/lib/auth/provider.js :101
const res = await fetch(clientId, { - net giantswarm-pro-67469fb/src/lib/selfupdate.js :58
const response = await fetch(GITHUB_API_URL, { headers });
secrets 5
- secrets giantswarm-pro-67469fb/bin/index.js :42
if (!process.env.GITHUB_API_TOKEN) { - secrets giantswarm-pro-67469fb/src/lib/api.js :22
const resolved = token || process.env.GITHUB_API_TOKEN; - secrets giantswarm-pro-67469fb/src/lib/mcp/http.js :62
const oauthClientSecret = process.env.GITHUB_OAUTH_CLIENT_SECRET; - secrets giantswarm-pro-67469fb/src/lib/rest-api.js :23
const envToken = process.env.GITHUB_API_TOKEN; - secrets giantswarm-pro-67469fb/src/lib/selfupdate.js :53
const token = process.env.GITHUB_API_TOKEN || process.env.GITHUB_TOKEN;
declared dependencies 4
- @modelcontextprotocol/sdk@^1.24.3
- @octokit/graphql@^9.0.3
- @octokit/rest@^22.0.1
- express@^5.2.1
cursor-plugin 1
- opaque (low) giantswarm-pro-67469fb/.cursor/rules/mcp-tools-usage.mdc
bundled .cursor/ plugin descriptor (giantswarm-pro-67469fb/.cursor/rules/mcp-tools-usage.mdc) — presence-detected; review the descriptor