git_checkout
on pypi:mcp-server-git@2026.1.14
Severity
1 finding on this tool
- mediumexcessive agencyf-r5-git_checkout
Tool `git_checkout` description mentions money but no `money` side-effect is declared
Description: "Switches branches - Inputs: - `repo_path` (string): Path to Git repository - `branch_name` (string): Name of branch to checkout - Returns: Confirmation of branch switch" -- this references money/payment/refund/etc., but the declared side_effects ([]) don't include `money`. A capframe-bind policy that relies on declared side_effects to scope spend caveats will under-scope this tool.
fix: Add `money` to the tool's `side_effects` declaration, or rewrite the description to clarify that no actual money moves.
OWASP LLM08NIST MEASURE-2.6ATLAS T0040
About this tool
git_checkout is one of 12 tools exposed by mcp-server-git. The server scored 94/100 overall against the capframe rule engine (source: registry). Last scanned 2026-06-05.
The findings above are emitted by the public capframe.findings.v1 schema. Disagree with one? Open an issue.