tiger-skills-mcp-server

The server uses environment variables for sensitive data like `GITHUB_TOKEN`, which is a good practice. It implements GitHub API throttling and retries. Skill names from YAML configuration are normalized to prevent invalid characters, mitigating potential path traversal or command injection if skill names were used in direct shell commands. The server's core function is to read and serve content (Markdown, directory listings) from configured local or GitHub sources. While skills can contain `scripts`, the server itself does not execute these; it exposes them for an external MCP-compatible agent to potentially use. The primary security considerations for deployment are the permissions granted to the `GITHUB_TOKEN` (should be read-only for skill repositories) and ensuring that the `skills.yaml` configuration points only to trusted skill sources, as an agent consuming skills from untrusted sources could be instructed to execute malicious scripts.