Github Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Github Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A small MCP server, built with FastMCP, that exposes read-only GitHub data as tools your AI assistant (Claude, etc.) can call.
It talks to the public GitHub REST API, so no token is required to get started — though setting one raises your rate limit.
| Tool | Description |
|---|---|
get_github_user | Public profile for a user: name, bio, followers, public repo count. |
get_github_repo | Info about a repo: description, stars, forks, language, open issues. |
list_user_repos | A user's public repos (most recently updated first). |
search_github_repos | Search public repos by keyword, sorted by stars. |
git clone https://github.com/anujsingla/github-mcp.git
cd github-mcp
poetry installNo token is needed for basic use, but the public GitHub API allows only 60 requests/hour unauthenticated. Set a personal access token to raise the limit to 5,000/hour:
export GITHUB_TOKEN=ghp_your_token_herepoetry run python -m github_mcp.serverRegister the server so Claude can call its tools:
claude mcp add github -- poetry run python -m github_mcp.serverThen ask things like "Look up the GitHub user octocat" or "Search GitHub for popular rust web frameworks."
src/github_mcp/server.py # FastMCP server and tool definitions
tests/ # Tests~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.