Back to MCP PR Review Pipeline

Security Report

MCP PR Review Pipeline

Pass
Version v1.0.13 Scanned 7 June 2026 at 11:05 Scanner v3.3.0

Summary

Detected

  • Services: llm-service
  • Permissions: filesystem:read
  • Data Handling:

Undeclared

All items declared

Warnings

No warnings

Findings (9)

Credentials

info env:GITHUB_TOKEN undeclared
credential-env-var
services/github-mcp.md:45

"{GITHUB_TOKEN}"

This file references the environment variable GITHUB_TOKEN. If this is a credential (API key, token, secret), declare it in requires.data_handling.

Permissions

info filesystem:read declared
mcp-file-read
services/github-mcp.md:57

"get_file_contents"

This content references filesystem read access. If intentional, declare filesystem:read in requires.permissions.

Services

info llm-service declared
frontmatter-service-connection
skills/pr-data-fetch.md:1

"connection: llm-service (runs_on)"

This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.

info llm-service declared
frontmatter-service-connection
skills/quality-review.md:1

"connection: llm-service (runs_on)"

This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.

info llm-service declared
frontmatter-service-connection
skills/review-gate.md:1

"connection: llm-service (runs_on)"

This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.

info llm-service declared
frontmatter-service-connection
skills/review-posting.md:1

"connection: llm-service (runs_on)"

This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.

info llm-service declared
frontmatter-service-connection
skills/security-review.md:1

"connection: llm-service (runs_on)"

This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.

info llm-service declared
frontmatter-service-connection
skills/style-review.md:1

"connection: llm-service (runs_on)"

This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.

info llm-service declared
frontmatter-service-connection
workflows/mcp-pr-review-pipeline.md:1

"connection: llm-service (runs_on)"

This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.

Send feedback

Sign in to send feedback — it lets us follow up and keeps the tracker free of spam.