Skip to content

feat: enhance MCP tool name validation with comprehensive pattern detection #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
isadeks wants to merge 83 commits into
base: main
Choose a base branch
from

Merge branch 'main' into issue-616-tool-naming-validation

f71d020
Select commit
Loading
Failed to load commit list.
Draft

feat: enhance MCP tool name validation with comprehensive pattern detection #1

Merge branch 'main' into issue-616-tool-naming-validation
f71d020
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / Bandit succeeded Mar 4, 2026 in 3s

6 new alerts

New alerts in code changed by this pull request

  • 2 warnings
  • 4 notes

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 446 in src/aws-diagram-mcp-server/awslabs/aws_diagram_mcp_server/diagrams_tools.py

See this annotation in the file changed.

Code scanning / Bandit

Use of exec detected. Warning

Use of exec detected.

Check warning on line 462 in src/aws-diagram-mcp-server/awslabs/aws_diagram_mcp_server/diagrams_tools.py

See this annotation in the file changed.

Code scanning / Bandit

Use of exec detected. Warning

Use of exec detected.

Check notice on line 21 in src/dynamodb-mcp-server/awslabs/dynamodb_mcp_server/model_validation_utils.py

See this annotation in the file changed.

Code scanning / Bandit

Consider possible security implications associated with the subprocess module. Note

Consider possible security implications associated with the subprocess module.

Check notice on line 71 in src/dynamodb-mcp-server/awslabs/dynamodb_mcp_server/model_validation_utils.py

See this annotation in the file changed.

Code scanning / Bandit

Possible hardcoded password: 'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY' Note

Possible hardcoded password: 'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY'

Check notice on line 137 in src/dynamodb-mcp-server/awslabs/dynamodb_mcp_server/model_validation_utils.py

See this annotation in the file changed.

Code scanning / Bandit

subprocess call - check for execution of untrusted input. Note

subprocess call - check for execution of untrusted input.

Check notice on line 777 in src/dynamodb-mcp-server/awslabs/dynamodb_mcp_server/model_validation_utils.py

See this annotation in the file changed.

Code scanning / Bandit

subprocess call - check for execution of untrusted input. Note

subprocess call - check for execution of untrusted input.