Claude 4 and GitHub MCP will leak your private GitHub repositories

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by dodslaser on Tuesday May 27, 2025 @06:35AM (#44105600)

Yes they can. If the token you give the LLM isn't permitted to access private repos you can lie all you want, it still can't access private repos.

Of course you shouldn't give an app/action/whatever a token with too lax permissions. Especially not a user facing one. That's not in any way unique to tools based on LLMs.

[ Parent | on HN ]

Re:Claude 4 and GitHub MCP will leak your private GitHub rep... by om8 on Tuesday May 27, 2025 @07:06AM (#44105750)

I thing you are just arguing about words, not about meanings. I’d call what you are referring to “secure llm infrastructure ”, not “secure llm”.

But the thing is that we both agree about what’s going on, just with different words

[ Parent | on HN ]