git-tools-mcp

The server executes Git commands using `subprocess.run` with a list of arguments, which prevents direct shell injection vulnerabilities. Inputs like commit hashes and working directories are passed as literal arguments to the Git command, not interpreted by a shell. There are no 'eval' or similar dangerous patterns, nor any hardcoded secrets. The primary remaining risk is if an LLM is prompted to provide malicious `cwd` values that could lead to unintended Git operations or access to sensitive repository data, but this is an LLM interaction risk rather than a code vulnerability. Note: The `git_is_git_repo` function contains a functional bug where it may always return `True` due to how `run_git_command` handles errors (by returning a string, not raising an exception), but this is not a security vulnerability.