Limit what a GitHub MCP token can reach
Invariant Labs showed a malicious issue in a public repo could make an agent using the GitHub MCP server copy data from the user's private repos into a public pull request.
GitHub MCP: real stories
1 item
1 item
Invariant Labs showed a malicious issue in a public repo could make an agent using the GitHub MCP server copy data from the user's private repos into a public pull request.