Github (universal-mcp-toolkit) MCP Server

@universal-mcp-toolkit/server-github npm v0.1.1

Published by @universal-mcp-toolkit — no publish provenance and no vendor-owned scope, so the publisher could not be verified. The repository link below is self-declared.

View on npm ↗ Repository ↗ Raw report (JSON) ↗

Trust grade

96/100

Last scanned 2026-07-22

Trust

A · 96/100

How safe the published surface and source look. Deterministic; every point is auditable.

Capability

Minimal

Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.

Coverage

Source

How much the scan could actually inspect. Shallow coverage is stated, never hidden.

A Why this grade 100 − 3.6 = 96/100

Every server starts at 100. These are the exact deductions the deterministic engine applied — each one reproducible, none of it an opinion or an LLM's guess:

Points	What was found	Category
−3.6	Near-miss of @modelcontextprotocol/server-gitlab MTC-SUP-005	supply-chain

Capability observations and info notes are shown under Findings but never scored. Open any row's finding below for the file, line and evidence behind the deduction.

Findings 1

medium Near-miss of @modelcontextprotocol/server-gitlab (edit distance 2)MTC-SUP-005

"@universal-mcp-toolkit/server-github" is edit-distance 2 from the package "@modelcontextprotocol/server-gitlab". Verify this is the intended package.

Fix: Confirm you meant "@modelcontextprotocol/server-gitlab". Install packages only from their documented, official name.

Location: package @universal-mcp-toolkit/server-github

What this scan could not see

No tools were enumerated, so prompt-injection, capability and toxic-flow analysis had no tool surface to inspect. To grade a package’s real runtime tools, scan the running server: --command "npx -y <package>".

Versions

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

Version	Score	Findings	Engine	Scanned
`v0.1.1` latest	A 96/100	1	1.5.0	2026-07-22

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

Markdown (GitHub README)

[![MCP Trust Score](https://mcptrustchecker.com/registry/universal-mcp-toolkit-server-github/badge.svg)](https://mcptrustchecker.com/registry/universal-mcp-toolkit-server-github)

HTML

<a href="https://mcptrustchecker.com/registry/universal-mcp-toolkit-server-github"><img src="https://mcptrustchecker.com/registry/universal-mcp-toolkit-server-github/badge.svg" alt="MCP Trust Score" height="20"></a>

Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/universal-mcp-toolkit-server-github/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan @universal-mcp-toolkit/server-github --online

Use the free API → How scoring works

Other implementations of Github 27

Independent packages implementing the same tool, scanned with the same engine. Compare all 28 side by side →

Github (ama-mcp) Source verified npm

@ama-mcp/github

Security scan results for the Github (ama-mcp) MCP server.

Other Score 100/100 0 findings 2.1k/wk Cap. Minimal

GitHub (Antidrift) (antidrift) Source verified npm

@antidrift/mcp-github

GitHub connector covering repos, issues, pull requests, actions, and releases.

Developer Tools Score 100/100 2 findings 16/wk Cap. Moderate

GitHub Issues (github-mcp) (Seey215) npm

github-mcp

GitHub server with OAuth support for issue management.

Developer Tools Score 100/100 1 finding 1.9k/wk Cap. Moderate

GitHub (Mission Squad) (missionsquad) npm

@missionsquad/mcp-github

Server for using the GitHub API.

Developer Tools Score 100/100 0 findings 498/wk Cap. Minimal

Github (atomicmail) npm

@atomicmail/mcp-github

Security scan results for the Github (atomicmail) MCP server.

Developer Tools Score 100/100 2 findings 82/wk Cap. High

GitHub (mcp-github-server) (pblarismendi) npm

mcp-github-server

Lists GitHub repositories, issues, pull requests, and more; compatible with macOS, Linux, and Windows.

Developer Tools Score 100/100 0 findings 22/wk Cap. Minimal

More in Browser Automation

3dstreet npm

3dstreet-mcp

Security scan results for the 3dstreet MCP server.

Browser Automation Score 100/100 0 findings Cap. Minimal

Accessibility Scanner npm

accessibility-scanner-mcp

Security scan results for the Accessibility Scanner MCP server.

Browser Automation Score 100/100 0 findings Cap. Minimal

Adspower Browser npm

adspower-browser

Security scan results for the Adspower Browser MCP server.

Browser Automation Score 100/100 2 findings Cap. High

Agent Browser npm

@nxavis/agent-browser-mcp

Security scan results for the Agent Browser MCP server.

Browser Automation Score 100/100 1 finding Cap. High

Agent Browser npm

agent-browser-mcp

Security scan results for the Agent Browser MCP server.

Browser Automation Score 100/100 3 findings Cap. High

Agent Browser Mcp Codex npm

agent-browser-mcp-codex

Security scan results for the Agent Browser Mcp Codex MCP server.

Browser Automation Score 100/100 2 findings Cap. High