Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret in stormbreaker06/mcp-github-server
- HIGH code analysis flagged committed secret in stormbreaker06/mcp-github-server
transport stdio counts 1 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
add-note
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit ee5b29d · analyzer v33 · 3w ago
danger signals2
- committed secret committed .env Stormbreaker06-MCP-SERVER-ee5b29d/.env :1
env file shipped with populated values - committed secret GitHub fine-grained PAT Stormbreaker06-MCP-SERVER-ee5b29d/config.py :2
github…(45 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 7
tool registrations 1
- add-note Stormbreaker06-MCP-SERVER-ee5b29d/src/mcp_github_server/server.py :103