github-readme-mcp

The server's functionality is limited to fetching public README.md files. No 'eval', obfuscation, or hardcoded secrets were found. The 'repoName' input is directly used to construct a URL to raw.githubusercontent.com, which is generally safe for content delivery and resists simple path traversal attacks to arbitrary files outside its scope. The primary risk would be how the consuming application handles the returned markdown content, but the server itself does not introduce direct execution vulnerabilities. The server makes an assumption of 'main' as the default branch, which is a functional limitation rather than a security flaw.