CourerBLOCK
mcp/alejandro-m-p/courer
MCP server for Git with local Ollama — zero tokens for git operations
Verdict
BLOCK
Grade
F
Trust score
52 /100
Exposed tools
—
Transport
—
License
MIT
Stars
43
01
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Issues & Bugs: @blak0p/git-courer/issues · Discussions: @blak0p/git-courer/discussions
Git, but agents can't break it.
An MCP server that gives AI agents a full, safe interface to Git — not just commits, the whole surface: status, diff, branch, stash, history, sync. Every mut
Read from source at commit
048ab9fc0bd4OBSERVED · 2026-10-0902
Trust audit
BLOCKgrade F · trust 52/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (7 observation(s))
- Network
- declared (7 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- found
Findings (25)
HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59
internal/infra/secrets/blacklist.go:54
"id_rsa", "id_ecdsa", "id_ed25519",
Why it matters. touches a credential store
HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59
internal/infra/secrets/blacklist.go:73
prefixes := []string{"id_rsa", "id_ecdsa", "id_ed25519", "credentials", "secrets", "password"}Why it matters. touches a credential store
HIGHPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250
scripts/install.sh:327
sudo apt-get update -qq && sudo apt-get install -y -qq python3 2>/dev/null
Why it matters. asks for elevated privileges
HIGHPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250
scripts/install.sh:329
sudo dnf install -y python3 2>/dev/null
Why it matters. asks for elevated privileges
HIGHPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250
scripts/install.sh:331
sudo pacman -S --noconfirm python3 2>/dev/null
Why it matters. asks for elevated privileges
HIGHPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250
scripts/install.sh:333
sudo apk add python3 2>/dev/null
Why it matters. asks for elevated privileges
MEDIUMInventory / provenance · inv.binary · CWE-1104
ffi/windows_amd64/libts_pack_core_ffi.a
libts_pack_core_ffi.a
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMFilesystem / path · fs.system_paths · CWE-22, CWE-59
internal/adapters/llm/ollama/lifecycle.go:185
"/usr/local/bin/ollama",
MEDIUMFilesystem / path · fs.system_paths · CWE-22, CWE-59
internal/installer/hooks.go:411
"/usr/local/bin/git-courer",
MEDIUMHard-coded secrets · secret.stripe · CWE-798, CWE-321
internal/infra/secrets/detector_test.go:121
+stripe_key = sk_live_26PHem9Oh3Y9oayqM61e`
LOWInventory / provenance · inv.hidden_file · CWE-1104
.golangci.yml
.golangci.yml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.goreleaser.yaml
.goreleaser.yaml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
internal/infra/chunkers/unified.go:502
// RC4: If return count increased AND error handling present → error return, not reorder
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
internal/infra/chunkers/unified_test.go:932
// RC4: Return increase with error increase → MOD_BODY_ERROR
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
internal/infra/chunkers/unified_test.go:944
// RC4: Return increase without error change → MOD_BODY_REORDER (unchanged behavior)
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
internal/infra/chunkers/unified_test.go:956
// RC4: Return increase with equal errors → MOD_BODY_REORDER (no error change)
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
internal/infra/chunkers/unified_test.go:968
// RC4 triangulation: Return decrease with error increase still → MOD_BODY_ERROR (existing check)
LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
internal/infra/secrets/blacklist_test.go:61
{"id_rsa key", "id_rsa", true},Why it matters. touches a credential store
LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
internal/infra/secrets/blacklist_test.go:62
{"id_ecdsa key", "id_ecdsa", true},Why it matters. touches a credential store
LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
internal/infra/secrets/blacklist_test.go:63
{"id_ed25519 key", "id_ed25519", true},Why it matters. touches a credential store
LOWFilesystem / path · fs.system_paths · CWE-22, CWE-59
internal/installer/hooks_test.go:18
if err := installHook(hooksPath, "/usr/local/bin/git-courer"); err != nil {LOWFilesystem / path · fs.system_paths · CWE-22, CWE-59
internal/installer/hooks_test.go:107
if err := installHook(hooksPath, "/usr/local/bin/git-courer"); err != nil {LOWFilesystem / path · fs.system_paths · CWE-22, CWE-59
internal/installer/hooks_test.go:111
if err := installHook(hooksPath, "/usr/local/bin/git-courer"); err != nil {LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
internal/adapters/llm/ollama/lifecycle_test.go:58
ol := NewOllamaLifecycle("http://127.0.0.1:19999", "", false,LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
internal/adapters/llm/ollama/lifecycle_test.go:97
ol := NewOllamaLifecycle("http://127.0.0.1:19999", "", true,Gates applied: no_behavioural_pass.
Audited 2026-10-09 · audit v0.4.1 · source sha
048ab9fc0bd4full audit observations/trust-audit/mcp-server/alejandro-m-p__courer.json · Report an issue / request a re-scan03
Audit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | 048ab9fc0bd4 | BLOCK | F | 52 | first audit |
04
Questions
What is the Courer MCP server?
MCP server for Git with local Ollama — zero tokens for git operations
Is Courer safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (52/100) and found 6 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Courer need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (048ab9fc0bd4), read on 2026-10-09. The repository is watched and re-audited when it changes.