GitHub MCP Server — security audit

Capability surface

• Process spawn

  Medium risk

  Launches subprocesses via docker, npx, uvx — supply-chain risk if package is compromised.

  Evidence: docker run

• Outbound network

  Medium risk

  Calls external APIs (GitHub, Slack, Stripe, etc.). Data leaves the machine.

  Evidence: github

Trust signals

Total trust score is the sum of these contributions. Each signal carries a fixed weight.

• Verified by Loadout

  +20 / 20

  Manually verified.

• Official author

  +15 / 15

  Maintained by the official GitHub team.

• Community traction

  +20 / 20

  12,300 GitHub stars.

• Public source

  +15 / 15

  Source is publicly auditable.

• Stability

  +0 / 15

  Stability not yet assessed.

• Capability surface

  +15 / 15

  No high-risk capabilities detected.