refined-mcp-servers

The server executes `gh` CLI commands via `subprocess`, passing user-provided query strings and `jq` expressions as arguments or standard input. This approach reduces direct shell injection risks compared to `shell=True`. However, reliance on the `gh` CLI means its security model is inherited. Malicious `jq` expressions could potentially exploit `jq` vulnerabilities (though `jq` is generally robust) or lead to excessive resource consumption. The HTTP server uses broad CORS (`allow_origins=["*"]`), which is acceptable for local LLM agent setups but requires caution if publicly exposed. No hardcoded secrets or `eval` usage were found.