magebitcom/magento2-mcp-cms-tools

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully audited with no injection sinks or high-severity findings, but all four action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.