Security Assessment
Untrusted MCP Server
High
Untrusted mcp_server: remote-sse MCP Server detected.
Untrusted MCP Server
High
Untrusted mcp_server: weather MCP Server detected.
Untrusted MCP Server
High
Untrusted mcp_server: github MCP Server detected.
Static Credentials Found
Medium
Hard-coded token detected: mcp_server: github MCP Server: name: GITHUB_TOKEN
Tools with write permissions detected
Medium
The tools create_branch, create_issue, create_or_update_file, create_pull_request, create_pull_request_with_copilot, create_repository, delete_file, fork_repository, push_files, update_issue, update_pull_request and update_pull_request_branch, from the toolset github MCP Server, have write-permissions.
+ additional findings truncated by portal UI