This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Simon Willison
simonwillison.net
did:plc:kft6lu4trxowqmter2b6vg6z
GitHub MCP suffers from the lethal trifecta for prompt injection: access to private data, exposure to malicious instructions + the ability to exfiltrate information
Be really careful with this stuff: attackers can trick your "agent" into stealing your private data https://simonwillison.net/2025/May/26/github-mcp-exploited/
[contains quote post or other embedded content]
2025-05-27T00:26:20.650Z