pab1it0/prometheus-mcp-server

AI review

This is a legitimate Prometheus MCP server extension with no hidden instructions, prompt injection, or data exfiltration mechanisms. The static findings are standard development practices (curl piped to sh for tool installation, environment variable usage, and localhost test requests) that pose no real safety risk in this context.

• low Remote code execution via curl pipe to sh in documentation — CONTRIBUTING.md and README.md contain `curl -LsSf https://astral.sh/uv/install.sh | sh` which is a common pattern for installing the uv package manager. This is not hidden or deceptive; it's standard developer documentation for setting up the development environment. No risk to end users of the MCP server.
• low Environment variable access for TOOL_PREFIX — The server reads `TOOL_PREFIX` from environment variables to customize tool names. This is a legitimate configuration mechanism, not an attempt to exfiltrate secrets. No credentials or sensitive data are being read or transmitted.
• low Network requests in tests and server code — Tests make requests to localhost:8080 and the server clears auth headers for requests.get. These are standard patterns for testing and HTTP client usage in a Prometheus integration. No evidence of data exfiltration to external servers.

Model: deepseek-chat

Static findings