Skip to content

Conversation

lwsinclair
Copy link

Hi there,

This pull request shares a security update on gemini-mcp-tool.

We also have an entry for gemini-mcp-tool in our directory, MseeP.ai, where we provide regular security and trust updates on your app.

We invite you to add our badge for your MCP server to your README to help your users learn from a third party that provides ongoing validation of gemini-mcp-tool.

You can easily take control over your listing for free: visit it at https://mseep.ai/app/jamubc-gemini-mcp-tool.

Yours Sincerely,

Lawrence W. Sinclair
CEO/SkyDeck AI
Founder of MseeP.ai
MCP servers you can trust


MseeP.ai Security Assessment Badge

Here are our latest evaluation results of gemini-mcp-tool

Security Scan Results

Security Score: 85/100

Risk Level: moderate

Scan Date: 2025-09-09

Score starts at 100, deducts points for security issues, and adds points for security best practices

Detected Vulnerabilities

Medium Severity

  • esbuild

    • [{'source': 1102341, 'name': 'esbuild', 'dependency': 'esbuild', 'title': 'esbuild enables any website to send any requests to the development server and read the response', 'url': 'https://github.com/advisories/GHSA-67mh-4wv8-2f99', 'severity': 'moderate', 'cwe': ['CWE-346'], 'cvss': {'score': 5.3, 'vectorString': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N'}, 'range': '<=0.24.2'}]
    • Fixed in version: unknown
  • mermaid

    • [{'source': 1106961, 'name': 'mermaid', 'dependency': 'mermaid', 'title': 'Mermaid does not properly sanitize architecture diagram iconText leading to XSS', 'url': 'https://github.com/advisories/GHSA-8gwm-58g9-j8pw', 'severity': 'moderate', 'cwe': ['CWE-79'], 'cvss': {'score': 0, 'vectorString': None}, 'range': '>=11.1.0 <11.10.0'}, {'source': 1107247, 'name': 'mermaid', 'dependency': 'mermaid', 'title': 'Mermaid improperly sanitizes sequence diagram labels leading to XSS', 'url': 'https://github.com/advisories/GHSA-7rqq-prvp-x9jh', 'severity': 'moderate', 'cwe': ['CWE-79'], 'cvss': {'score': 0, 'vectorString': None}, 'range': '>=11.0.0-alpha.1 <11.10.0'}]
    • Fixed in version: unknown
  • vite

    • ['esbuild']
    • Fixed in version: unknown
  • ... and 5 more medium severity vulnerabilities

This security assessment was conducted by MseeP.ai, an independent security validation service for MCP servers. Visit our website to learn more about our security reviews.

@Copilot Copilot AI review requested due to automatic review settings September 9, 2025 13:02
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary of Changes

Hello @lwsinclair, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request integrates a security assessment badge from MseeP.ai into the project's README.md file. The badge serves as a visual indicator of the project's security posture, linking to a detailed third-party security validation report for the gemini-mcp-tool. This aims to enhance user trust by providing external verification of the application's security.

Highlights

  • README Update: Added an MseeP.ai Security Assessment Badge to the top of the README.md file.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in issue comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds a security assessment badge from MseeP.ai to the README.md file, along with a detailed security scan report. The badge links to a third-party security validation service that provides ongoing monitoring and trust assessment for the gemini-mcp-tool MCP server.

  • Adds MseeP.ai security badge to the top of README
  • Includes comprehensive security scan results showing 85/100 security score
  • Provides vulnerability details for dependencies like esbuild, mermaid, and vite

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Comment on lines +1 to 4
[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/jamubc-gemini-mcp-tool-badge.png)](https://mseep.ai/app/jamubc-gemini-mcp-tool)


# Gemini MCP Tool
Copy link
Preview

Copilot AI Sep 9, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] The badge placement at the very top of the README disrupts the document structure. Consider placing it after the main title or in a dedicated "Security" section to maintain better document flow and readability.

Suggested change
[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/jamubc-gemini-mcp-tool-badge.png)](https://mseep.ai/app/jamubc-gemini-mcp-tool)
# Gemini MCP Tool
# Gemini MCP Tool
[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/jamubc-gemini-mcp-tool-badge.png)](https://mseep.ai/app/jamubc-gemini-mcp-tool)

Copilot uses AI. Check for mistakes.

Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request adds a security assessment badge from MseeP.ai to the README.md file. While adding a security badge can be beneficial, its current placement at the very top of the document is unconventional. My review includes a comment suggesting a more appropriate location for the badge to maintain the document's structure and visual consistency. The pull request description also contains security vulnerability information that may warrant further investigation by the project maintainers.

Comment on lines +1 to 3
[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/jamubc-gemini-mcp-tool-badge.png)](https://mseep.ai/app/jamubc-gemini-mcp-tool)


Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The placement of this badge at the very top of the README, before the main project title, is unconventional and disrupts the document's structure. For better organization and visual consistency, it's recommended to group all badges. This badge should be moved into the existing centered div block (currently on line 8) where the other project badges are located.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant