@kryptosai/mcp-observatory 1.28.2 → 1.28.3

package/docs/safety-index/artifacts/github-mcp-server.json

@@ -0,0 +1,1707 @@
+{
+  "artifactType": "run",
+  "schemaVersion": "1.0.0",
+  "gate": "pass",
+  "runId": "run_2026-07-08T213518919Z_6d8ffd44",
+  "createdAt": "2026-07-08T21:35:18.919Z",
+  "toolVersion": "1.28.2",
+  "target": {
+    "targetId": "github-mcp-server",
+    "adapter": "local-process",
+    "command": "npx",
+    "args": [
+      "-y",
+      "@modelcontextprotocol/server-github"
+    ],
+    "cwd": ".",
+    "metadata": {
+      "package": "@modelcontextprotocol/server-github",
+      "purpose": "mcp-safety-index",
+      "riskClass": "Repository mutation and PR control",
+      "failureClass": "Write/merge tool boundary",
+      "whyItMatters": "Exposes 26 tools to agents, including file writes, branch creation, issue/PR creation, and PR merges across any repo a token can reach — high-stakes write access that needs a visible boundary before an agent is trusted with it."
+    },
+    "serverName": "github-mcp-server",
+    "serverVersion": "0.6.2"
+  },
+  "environment": {
+    "platform": "win32 10.0.26200",
+    "nodeVersion": "v24.15.0"
+  },
+  "summary": {
+    "total": 8,
+    "pass": 2,
+    "fail": 0,
+    "partial": 4,
+    "unsupported": 2,
+    "flaky": 0,
+    "skipped": 0,
+    "gate": "pass"
+  },
+  "checks": [
+    {
+      "id": "tools",
+      "capability": "tools",
+      "status": "pass",
+      "durationMs": 4.374199999998382,
+      "message": "Advertised capability responded with the minimal expected shape (26 items).",
+      "evidence": [
+        {
+          "endpoint": "tools/list",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 26,
+          "identifiers": [
+            "create_or_update_file",
+            "search_repositories",
+            "create_repository",
+            "get_file_contents",
+            "push_files",
+            "create_issue",
+            "create_pull_request",
+            "fork_repository",
+            "create_branch",
+            "list_commits",
+            "list_issues",
+            "update_issue",
+            "add_issue_comment",
+            "search_code",
+            "search_issues",
+            "search_users",
+            "get_issue",
+            "get_pull_request",
+            "list_pull_requests",
+            "create_pull_request_review",
+            "merge_pull_request",
+            "get_pull_request_files",
+            "get_pull_request_status",
+            "update_pull_request_branch",
+            "get_pull_request_comments",
+            "get_pull_request_reviews"
+          ],
+          "diagnostics": [
+            "GitHub MCP Server running on stdio"
+          ],
+          "schemas": {
+            "create_or_update_file": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "path": {
+                  "type": "string",
+                  "description": "Path where to create/update the file"
+                },
+                "content": {
+                  "type": "string",
+                  "description": "Content of the file"
+                },
+                "message": {
+                  "type": "string",
+                  "description": "Commit message"
+                },
+                "branch": {
+                  "type": "string",
+                  "description": "Branch to create/update the file in"
+                },
+                "sha": {
+                  "type": "string",
+                  "description": "SHA of the file being replaced (required when updating existing files)"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "path",
+                "content",
+                "message",
+                "branch"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "search_repositories": {
+              "type": "object",
+              "properties": {
+                "query": {
+                  "type": "string",
+                  "description": "Search query (see GitHub search syntax)"
+                },
+                "page": {
+                  "type": "number",
+                  "description": "Page number for pagination (default: 1)"
+                },
+                "perPage": {
+                  "type": "number",
+                  "description": "Number of results per page (default: 30, max: 100)"
+                }
+              },
+              "required": [
+                "query"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "create_repository": {
+              "type": "object",
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "description": {
+                  "type": "string",
+                  "description": "Repository description"
+                },
+                "private": {
+                  "type": "boolean",
+                  "description": "Whether the repository should be private"
+                },
+                "autoInit": {
+                  "type": "boolean",
+                  "description": "Initialize with README.md"
+                }
+              },
+              "required": [
+                "name"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "get_file_contents": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "path": {
+                  "type": "string",
+                  "description": "Path to the file or directory"
+                },
+                "branch": {
+                  "type": "string",
+                  "description": "Branch to get contents from"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "path"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "push_files": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "branch": {
+                  "type": "string",
+                  "description": "Branch to push to (e.g., 'main' or 'master')"
+                },
+                "files": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "path": {
+                        "type": "string"
+                      },
+                      "content": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "path",
+                      "content"
+                    ],
+                    "additionalProperties": false
+                  },
+                  "description": "Array of files to push"
+                },
+                "message": {
+                  "type": "string",
+                  "description": "Commit message"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "branch",
+                "files",
+                "message"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "create_issue": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string"
+                },
+                "repo": {
+                  "type": "string"
+                },
+                "title": {
+                  "type": "string"
+                },
+                "body": {
+                  "type": "string"
+                },
+                "assignees": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "milestone": {
+                  "type": "number"
+                },
+                "labels": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "title"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "create_pull_request": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "title": {
+                  "type": "string",
+                  "description": "Pull request title"
+                },
+                "body": {
+                  "type": "string",
+                  "description": "Pull request body/description"
+                },
+                "head": {
+                  "type": "string",
+                  "description": "The name of the branch where your changes are implemented"
+                },
+                "base": {
+                  "type": "string",
+                  "description": "The name of the branch you want the changes pulled into"
+                },
+                "draft": {
+                  "type": "boolean",
+                  "description": "Whether to create the pull request as a draft"
+                },
+                "maintainer_can_modify": {
+                  "type": "boolean",
+                  "description": "Whether maintainers can modify the pull request"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "title",
+                "head",
+                "base"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "fork_repository": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "organization": {
+                  "type": "string",
+                  "description": "Optional: organization to fork to (defaults to your personal account)"
+                }
+              },
+              "required": [
+                "owner",
+                "repo"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "create_branch": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "branch": {
+                  "type": "string",
+                  "description": "Name for the new branch"
+                },
+                "from_branch": {
+                  "type": "string",
+                  "description": "Optional: source branch to create from (defaults to the repository's default branch)"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "branch"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "list_commits": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string"
+                },
+                "repo": {
+                  "type": "string"
+                },
+                "sha": {
+                  "type": "string"
+                },
+                "page": {
+                  "type": "number"
+                },
+                "perPage": {
+                  "type": "number"
+                }
+              },
+              "required": [
+                "owner",
+                "repo"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "list_issues": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string"
+                },
+                "repo": {
+                  "type": "string"
+                },
+                "direction": {
+                  "type": "string",
+                  "enum": [
+                    "asc",
+                    "desc"
+                  ]
+                },
+                "labels": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "page": {
+                  "type": "number"
+                },
+                "per_page": {
+                  "type": "number"
+                },
+                "since": {
+                  "type": "string"
+                },
+                "sort": {
+                  "type": "string",
+                  "enum": [
+                    "created",
+                    "updated",
+                    "comments"
+                  ]
+                },
+                "state": {
+                  "type": "string",
+                  "enum": [
+                    "open",
+                    "closed",
+                    "all"
+                  ]
+                }
+              },
+              "required": [
+                "owner",
+                "repo"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "update_issue": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string"
+                },
+                "repo": {
+                  "type": "string"
+                },
+                "issue_number": {
+                  "type": "number"
+                },
+                "title": {
+                  "type": "string"
+                },
+                "body": {
+                  "type": "string"
+                },
+                "assignees": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "milestone": {
+                  "type": "number"
+                },
+                "labels": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "state": {
+                  "type": "string",
+                  "enum": [
+                    "open",
+                    "closed"
+                  ]
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "issue_number"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "add_issue_comment": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string"
+                },
+                "repo": {
+                  "type": "string"
+                },
+                "issue_number": {
+                  "type": "number"
+                },
+                "body": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "issue_number",
+                "body"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "search_code": {
+              "type": "object",
+              "properties": {
+                "q": {
+                  "type": "string"
+                },
+                "order": {
+                  "type": "string",
+                  "enum": [
+                    "asc",
+                    "desc"
+                  ]
+                },
+                "page": {
+                  "type": "number",
+                  "minimum": 1
+                },
+                "per_page": {
+                  "type": "number",
+                  "minimum": 1,
+                  "maximum": 100
+                }
+              },
+              "required": [
+                "q"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "search_issues": {
+              "type": "object",
+              "properties": {
+                "q": {
+                  "type": "string"
+                },
+                "order": {
+                  "type": "string",
+                  "enum": [
+                    "asc",
+                    "desc"
+                  ]
+                },
+                "page": {
+                  "type": "number",
+                  "minimum": 1
+                },
+                "per_page": {
+                  "type": "number",
+                  "minimum": 1,
+                  "maximum": 100
+                },
+                "sort": {
+                  "type": "string",
+                  "enum": [
+                    "comments",
+                    "reactions",
+                    "reactions-+1",
+                    "reactions--1",
+                    "reactions-smile",
+                    "reactions-thinking_face",
+                    "reactions-heart",
+                    "reactions-tada",
+                    "interactions",
+                    "created",
+                    "updated"
+                  ]
+                }
+              },
+              "required": [
+                "q"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "search_users": {
+              "type": "object",
+              "properties": {
+                "q": {
+                  "type": "string"
+                },
+                "order": {
+                  "type": "string",
+                  "enum": [
+                    "asc",
+                    "desc"
+                  ]
+                },
+                "page": {
+                  "type": "number",
+                  "minimum": 1
+                },
+                "per_page": {
+                  "type": "number",
+                  "minimum": 1,
+                  "maximum": 100
+                },
+                "sort": {
+                  "type": "string",
+                  "enum": [
+                    "followers",
+                    "repositories",
+                    "joined"
+                  ]
+                }
+              },
+              "required": [
+                "q"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "get_issue": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string"
+                },
+                "repo": {
+                  "type": "string"
+                },
+                "issue_number": {
+                  "type": "number"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "issue_number"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "get_pull_request": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "pull_number": {
+                  "type": "number",
+                  "description": "Pull request number"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "pull_number"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "list_pull_requests": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "state": {
+                  "type": "string",
+                  "enum": [
+                    "open",
+                    "closed",
+                    "all"
+                  ],
+                  "description": "State of the pull requests to return"
+                },
+                "head": {
+                  "type": "string",
+                  "description": "Filter by head user or head organization and branch name"
+                },
+                "base": {
+                  "type": "string",
+                  "description": "Filter by base branch name"
+                },
+                "sort": {
+                  "type": "string",
+                  "enum": [
+                    "created",
+                    "updated",
+                    "popularity",
+                    "long-running"
+                  ],
+                  "description": "What to sort results by"
+                },
+                "direction": {
+                  "type": "string",
+                  "enum": [
+                    "asc",
+                    "desc"
+                  ],
+                  "description": "The direction of the sort"
+                },
+                "per_page": {
+                  "type": "number",
+                  "description": "Results per page (max 100)"
+                },
+                "page": {
+                  "type": "number",
+                  "description": "Page number of the results"
+                }
+              },
+              "required": [
+                "owner",
+                "repo"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "create_pull_request_review": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "pull_number": {
+                  "type": "number",
+                  "description": "Pull request number"
+                },
+                "commit_id": {
+                  "type": "string",
+                  "description": "The SHA of the commit that needs a review"
+                },
+                "body": {
+                  "type": "string",
+                  "description": "The body text of the review"
+                },
+                "event": {
+                  "type": "string",
+                  "enum": [
+                    "APPROVE",
+                    "REQUEST_CHANGES",
+                    "COMMENT"
+                  ],
+                  "description": "The review action to perform"
+                },
+                "comments": {
+                  "type": "array",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "path": {
+                            "type": "string",
+                            "description": "The relative path to the file being commented on"
+                          },
+                          "position": {
+                            "type": "number",
+                            "description": "The position in the diff where you want to add a review comment"
+                          },
+                          "body": {
+                            "type": "string",
+                            "description": "Text of the review comment"
+                          }
+                        },
+                        "required": [
+                          "path",
+                          "position",
+                          "body"
+                        ],
+                        "additionalProperties": false
+                      },
+                      {
+                        "type": "object",
+                        "properties": {
+                          "path": {
+                            "type": "string",
+                            "description": "The relative path to the file being commented on"
+                          },
+                          "line": {
+                            "type": "number",
+                            "description": "The line number in the file where you want to add a review comment"
+                          },
+                          "body": {
+                            "type": "string",
+                            "description": "Text of the review comment"
+                          }
+                        },
+                        "required": [
+                          "path",
+                          "line",
+                          "body"
+                        ],
+                        "additionalProperties": false
+                      }
+                    ]
+                  },
+                  "description": "Comments to post as part of the review (specify either position or line, not both)"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "pull_number",
+                "body",
+                "event"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "merge_pull_request": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "pull_number": {
+                  "type": "number",
+                  "description": "Pull request number"
+                },
+                "commit_title": {
+                  "type": "string",
+                  "description": "Title for the automatic commit message"
+                },
+                "commit_message": {
+                  "type": "string",
+                  "description": "Extra detail to append to automatic commit message"
+                },
+                "merge_method": {
+                  "type": "string",
+                  "enum": [
+                    "merge",
+                    "squash",
+                    "rebase"
+                  ],
+                  "description": "Merge method to use"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "pull_number"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "get_pull_request_files": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "pull_number": {
+                  "type": "number",
+                  "description": "Pull request number"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "pull_number"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "get_pull_request_status": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "pull_number": {
+                  "type": "number",
+                  "description": "Pull request number"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "pull_number"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "update_pull_request_branch": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "pull_number": {
+                  "type": "number",
+                  "description": "Pull request number"
+                },
+                "expected_head_sha": {
+                  "type": "string",
+                  "description": "The expected SHA of the pull request's HEAD ref"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "pull_number"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "get_pull_request_comments": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "pull_number": {
+                  "type": "number",
+                  "description": "Pull request number"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "pull_number"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            },
+            "get_pull_request_reviews": {
+              "type": "object",
+              "properties": {
+                "owner": {
+                  "type": "string",
+                  "description": "Repository owner (username or organization)"
+                },
+                "repo": {
+                  "type": "string",
+                  "description": "Repository name"
+                },
+                "pull_number": {
+                  "type": "number",
+                  "description": "Pull request number"
+                }
+              },
+              "required": [
+                "owner",
+                "repo",
+                "pull_number"
+              ],
+              "additionalProperties": false,
+              "$schema": "http://json-schema.org/draft-07/schema#"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "id": "prompts",
+      "capability": "prompts",
+      "status": "unsupported",
+      "durationMs": 0.00480000000243308,
+      "message": "Prompts are not advertised by the target.",
+      "evidence": [
+        {
+          "endpoint": "prompts/list",
+          "advertised": false,
+          "responded": false,
+          "minimalShapePresent": false,
+          "diagnostics": []
+        }
+      ]
+    },
+    {
+      "id": "resources",
+      "capability": "resources",
+      "status": "unsupported",
+      "durationMs": 0.008300000001327135,
+      "message": "Resources are not advertised by the target.",
+      "evidence": [
+        {
+          "endpoint": "resources/list | resources/templates/list",
+          "advertised": false,
+          "responded": false,
+          "minimalShapePresent": false,
+          "diagnostics": []
+        }
+      ]
+    },
+    {
+      "id": "security-lite",
+      "capability": "security-lite",
+      "status": "partial",
+      "durationMs": 0.13130000000091968,
+      "message": "Found 1 security finding(s): 0 high, 1 medium, 0 low.",
+      "evidence": [
+        {
+          "endpoint": "security/scan-lite",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 1,
+          "identifiers": [
+            "create_or_update_file"
+          ],
+          "diagnostics": [
+            "[medium] Tool \"create_or_update_file\" accepts filesystem paths and has destructive capabilities."
+          ],
+          "findings": [
+            {
+              "ruleId": "broad-filesystem",
+              "severity": "medium",
+              "toolName": "create_or_update_file",
+              "message": "Tool \"create_or_update_file\" accepts filesystem paths and has destructive capabilities."
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "conformance",
+      "capability": "conformance",
+      "status": "pass",
+      "durationMs": 3.17439999999624,
+      "message": "All 7 conformance checks passed.",
+      "evidence": [
+        {
+          "endpoint": "conformance/check",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 7,
+          "identifiers": [],
+          "diagnostics": [
+            "[pass] capabilities-present: Server returned capabilities object.",
+            "[pass] server-info: Server provided initialization info.",
+            "[pass] tools-capability-match: tools/list returned 26 tool(s).",
+            "[pass] prompts-capability-match: Prompts not advertised — endpoint check skipped.",
+            "[pass] resources-capability-match: Resources not advertised — endpoint check skipped.",
+            "[pass] tool-response-content: No safe tool to invoke — content validation skipped.",
+            "[pass] error-handling: Server returned proper error code -32601 for unknown method."
+          ]
+        }
+      ]
+    },
+    {
+      "id": "schema-quality",
+      "capability": "schema-quality",
+      "status": "partial",
+      "durationMs": 1.8392000000021653,
+      "message": "Found 51 quality finding(s) across 26 item(s): 0 warnings, 51 info.",
+      "evidence": [
+        {
+          "endpoint": "schema-quality/scan",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 51,
+          "identifiers": [
+            "create_issue",
+            "list_commits",
+            "list_issues",
+            "update_issue",
+            "add_issue_comment",
+            "search_code",
+            "search_issues",
+            "search_users",
+            "get_issue"
+          ],
+          "diagnostics": [
+            "[info] tool \"create_issue\": Property 'owner' missing description",
+            "[info] tool \"create_issue\": Property 'repo' missing description",
+            "[info] tool \"create_issue\": Property 'title' missing description",
+            "[info] tool \"create_issue\": Property 'body' missing description",
+            "[info] tool \"create_issue\": Property 'assignees' missing description",
+            "[info] tool \"create_issue\": Property 'milestone' missing description",
+            "[info] tool \"create_issue\": Property 'labels' missing description",
+            "[info] tool \"list_commits\": Property 'owner' missing description",
+            "[info] tool \"list_commits\": Property 'repo' missing description",
+            "[info] tool \"list_commits\": Property 'sha' missing description",
+            "[info] tool \"list_commits\": Property 'page' missing description",
+            "[info] tool \"list_commits\": Property 'perPage' missing description",
+            "[info] tool \"list_issues\": Property 'owner' missing description",
+            "[info] tool \"list_issues\": Property 'repo' missing description",
+            "[info] tool \"list_issues\": Property 'direction' missing description",
+            "[info] tool \"list_issues\": Property 'labels' missing description",
+            "[info] tool \"list_issues\": Property 'page' missing description",
+            "[info] tool \"list_issues\": Property 'per_page' missing description",
+            "[info] tool \"list_issues\": Property 'since' missing description",
+            "[info] tool \"list_issues\": Property 'sort' missing description",
+            "[info] tool \"list_issues\": Property 'state' missing description",
+            "[info] tool \"update_issue\": Property 'owner' missing description",
+            "[info] tool \"update_issue\": Property 'repo' missing description",
+            "[info] tool \"update_issue\": Property 'issue_number' missing description",
+            "[info] tool \"update_issue\": Property 'title' missing description",
+            "[info] tool \"update_issue\": Property 'body' missing description",
+            "[info] tool \"update_issue\": Property 'assignees' missing description",
+            "[info] tool \"update_issue\": Property 'milestone' missing description",
+            "[info] tool \"update_issue\": Property 'labels' missing description",
+            "[info] tool \"update_issue\": Property 'state' missing description",
+            "[info] tool \"add_issue_comment\": Property 'owner' missing description",
+            "[info] tool \"add_issue_comment\": Property 'repo' missing description",
+            "[info] tool \"add_issue_comment\": Property 'issue_number' missing description",
+            "[info] tool \"add_issue_comment\": Property 'body' missing description",
+            "[info] tool \"search_code\": Property 'q' missing description",
+            "[info] tool \"search_code\": Property 'order' missing description",
+            "[info] tool \"search_code\": Property 'page' missing description",
+            "[info] tool \"search_code\": Property 'per_page' missing description",
+            "[info] tool \"search_issues\": Property 'q' missing description",
+            "[info] tool \"search_issues\": Property 'order' missing description",
+            "[info] tool \"search_issues\": Property 'page' missing description",
+            "[info] tool \"search_issues\": Property 'per_page' missing description",
+            "[info] tool \"search_issues\": Property 'sort' missing description",
+            "[info] tool \"search_users\": Property 'q' missing description",
+            "[info] tool \"search_users\": Property 'order' missing description",
+            "[info] tool \"search_users\": Property 'page' missing description",
+            "[info] tool \"search_users\": Property 'per_page' missing description",
+            "[info] tool \"search_users\": Property 'sort' missing description",
+            "[info] tool \"get_issue\": Property 'owner' missing description",
+            "[info] tool \"get_issue\": Property 'repo' missing description",
+            "[info] tool \"get_issue\": Property 'issue_number' missing description"
+          ],
+          "findings": [
+            {
+              "itemType": "tool",
+              "itemName": "create_issue",
+              "issue": "Property 'owner' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "create_issue",
+              "issue": "Property 'repo' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "create_issue",
+              "issue": "Property 'title' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "create_issue",
+              "issue": "Property 'body' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "create_issue",
+              "issue": "Property 'assignees' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "create_issue",
+              "issue": "Property 'milestone' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "create_issue",
+              "issue": "Property 'labels' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_commits",
+              "issue": "Property 'owner' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_commits",
+              "issue": "Property 'repo' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_commits",
+              "issue": "Property 'sha' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_commits",
+              "issue": "Property 'page' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_commits",
+              "issue": "Property 'perPage' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_issues",
+              "issue": "Property 'owner' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_issues",
+              "issue": "Property 'repo' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_issues",
+              "issue": "Property 'direction' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_issues",
+              "issue": "Property 'labels' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_issues",
+              "issue": "Property 'page' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_issues",
+              "issue": "Property 'per_page' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_issues",
+              "issue": "Property 'since' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_issues",
+              "issue": "Property 'sort' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "list_issues",
+              "issue": "Property 'state' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "issue": "Property 'owner' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "issue": "Property 'repo' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "issue": "Property 'issue_number' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "issue": "Property 'title' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "issue": "Property 'body' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "issue": "Property 'assignees' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "issue": "Property 'milestone' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "issue": "Property 'labels' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "issue": "Property 'state' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "add_issue_comment",
+              "issue": "Property 'owner' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "add_issue_comment",
+              "issue": "Property 'repo' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "add_issue_comment",
+              "issue": "Property 'issue_number' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "add_issue_comment",
+              "issue": "Property 'body' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_code",
+              "issue": "Property 'q' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_code",
+              "issue": "Property 'order' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_code",
+              "issue": "Property 'page' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_code",
+              "issue": "Property 'per_page' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_issues",
+              "issue": "Property 'q' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_issues",
+              "issue": "Property 'order' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_issues",
+              "issue": "Property 'page' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_issues",
+              "issue": "Property 'per_page' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_issues",
+              "issue": "Property 'sort' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_users",
+              "issue": "Property 'q' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_users",
+              "issue": "Property 'order' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_users",
+              "issue": "Property 'page' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_users",
+              "issue": "Property 'per_page' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "search_users",
+              "issue": "Property 'sort' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "get_issue",
+              "issue": "Property 'owner' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "get_issue",
+              "issue": "Property 'repo' missing description",
+              "severity": "info"
+            },
+            {
+              "itemType": "tool",
+              "itemName": "get_issue",
+              "issue": "Property 'issue_number' missing description",
+              "severity": "info"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "security",
+      "capability": "security",
+      "status": "partial",
+      "durationMs": 2.661199999995006,
+      "message": "Found 1 security finding(s): 0 high, 1 medium, 0 low.",
+      "evidence": [
+        {
+          "endpoint": "security/scan",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 1,
+          "identifiers": [
+            "create_or_update_file"
+          ],
+          "diagnostics": [
+            "[medium] Tool \"create_or_update_file\" accepts filesystem paths and has destructive capabilities."
+          ],
+          "findings": [
+            {
+              "ruleId": "broad-filesystem",
+              "severity": "medium",
+              "toolName": "create_or_update_file",
+              "message": "Tool \"create_or_update_file\" accepts filesystem paths and has destructive capabilities."
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "attack-sim",
+      "capability": "attack-sim",
+      "status": "partial",
+      "durationMs": 2.7502000000022235,
+      "message": "Safe attack simulation found 5 finding(s): 0 high, 5 medium, 0 low.",
+      "evidence": [
+        {
+          "endpoint": "attack-sim/safe",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 5,
+          "identifiers": [
+            "create_or_update_file",
+            "create_issue",
+            "create_pull_request",
+            "update_issue",
+            "create_pull_request_review"
+          ],
+          "diagnostics": [
+            "[medium] Tool \"create_or_update_file\" combines broad parameters (path) with destructive or non-read-only behavior.",
+            "[medium] Tool \"create_issue\" combines broad parameters (body) with destructive or non-read-only behavior.",
+            "[medium] Tool \"create_pull_request\" combines broad parameters (body) with destructive or non-read-only behavior.",
+            "[medium] Tool \"update_issue\" combines broad parameters (body) with destructive or non-read-only behavior.",
+            "[medium] Tool \"create_pull_request_review\" combines broad parameters (body) with destructive or non-read-only behavior."
+          ],
+          "findings": [
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "medium",
+              "itemType": "tool",
+              "itemName": "create_or_update_file",
+              "message": "Tool \"create_or_update_file\" combines broad parameters (path) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "path"
+                ],
+                "description": "Create or update a single file in a GitHub repository"
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "gate"
+            },
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "medium",
+              "itemType": "tool",
+              "itemName": "create_issue",
+              "message": "Tool \"create_issue\" combines broad parameters (body) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "body"
+                ],
+                "description": "Create a new issue in a GitHub repository"
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "gate"
+            },
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "medium",
+              "itemType": "tool",
+              "itemName": "create_pull_request",
+              "message": "Tool \"create_pull_request\" combines broad parameters (body) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "body"
+                ],
+                "description": "Create a new pull request in a GitHub repository"
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "gate"
+            },
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "medium",
+              "itemType": "tool",
+              "itemName": "update_issue",
+              "message": "Tool \"update_issue\" combines broad parameters (body) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "body"
+                ],
+                "description": "Update an existing issue in a GitHub repository"
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "gate"
+            },
+            {
+              "ruleId": "attack-sim/permission-boundary/broad-destructive-tool",
+              "attackClass": "permission-boundary",
+              "severity": "medium",
+              "itemType": "tool",
+              "itemName": "create_pull_request_review",
+              "message": "Tool \"create_pull_request_review\" combines broad parameters (body) with destructive or non-read-only behavior.",
+              "evidence": {
+                "broadParams": [
+                  "body"
+                ],
+                "description": "Create a review on a pull request"
+              },
+              "recommendation": "Constrain this tool with typed inputs, allowlists, explicit read-only/destructive annotations, and a harmless CI fixture.",
+              "recommendedAction": "gate"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "healthScore": {
+    "overall": 77,
+    "grade": "C",
+    "dimensions": [
+      {
+        "name": "Protocol Compliance",
+        "weight": 0.3,
+        "score": 100,
+        "details": [
+          "conformance: pass (100/100)"
+        ]
+      },
+      {
+        "name": "Schema Quality",
+        "weight": 0.2,
+        "score": 60,
+        "details": [
+          "schema-quality: partial (60/100)"
+        ]
+      },
+      {
+        "name": "Security",
+        "weight": 0.2,
+        "score": 60,
+        "details": [
+          "security-lite: partial (60/100)",
+          "security: partial (60/100)",
+          "attack-sim: partial (60/100)"
+        ]
+      },
+      {
+        "name": "Reliability",
+        "weight": 0.2,
+        "score": 67,
+        "details": [
+          "tools: pass (100/100)",
+          "prompts: unsupported (50/100)",
+          "resources: unsupported (50/100)"
+        ]
+      },
+      {
+        "name": "Performance",
+        "weight": 0.1,
+        "score": 100,
+        "details": [
+          "Connect: 3647ms",
+          "p95 latency: 4ms (3 operations)"
+        ]
+      }
+    ]
+  },
+  "performanceMetrics": {
+    "connectMs": 3646.7235,
+    "toolsListMs": 4.374199999998382,
+    "promptsListMs": 0.00480000000243308,
+    "resourcesListMs": 0.008300000001327135
+  }
+}