Is GitKraken MCP server safe?

package.json runs scripts automatically when the package is installed.

"postinstall": "node install.js",

Why it matters: Install scripts are a favorite supply-chain foothold — they execute on every machine that installs the package.

Fix: Inspect the hook command. Install-time scripts are a common supply chain execution vector; ensure they do nothing beyond a documented build step.

The component can run operating-system commands or spawn processes.

import { spawnSync } from "child_process";

let result = spawnSync(path.join(binDir, bin), args, {

Why it matters: Powerful and often legitimate — confirm the commands aren't built from untrusted input.

Fix: Confirm the command and its arguments are fully controlled and not derived from untrusted input; prefer execFile with an argument array.

The component reads files from disk.

fs.readFileSync(new URL("./package.json", import.meta.url), "utf8"),

const zipData = fs.readFileSync(zipPath);

.update(fs.readFileSync(filename))

Why it matters: Usually legitimate, but worth confirming it can't be steered into reading sensitive files.

Fix: Confirm which files are read and that paths cannot be influenced by untrusted input to reach sensitive locations.

The component writes or deletes files on disk.

fs.rmSync(wrappedDir, { recursive: true, force: true });

fs.writeFileSync(file, content);

const writer = fs.createWriteStream(filename);

Why it matters: Usually legitimate, but worth confirming the paths can't be controlled by untrusted input.

Fix: Confirm which files are written/deleted and that paths cannot be influenced by untrusted input.

The component makes outbound network requests.

import http from "http";

import https from "https";

Why it matters: Usually legitimate, but confirm the destinations are expected and no sensitive data leaves.

Fix: Confirm the destination hosts are expected and that no sensitive data is sent off-host.