gtm-workflow

No clear malware is present. The requested-table filter appears to let callers select internal gtm bookkeeping tables without enabling the internal option, potentially exposing internal database contents through readData. Verify authorization and intended visibility in the surrounding code.

No clear malicious payload, obfuscation, persistence, credential theft logic, or destructive behavior is present. The code is a readable MCP HTTP client. It has meaningful configuration-dependent security risks: arbitrary URLs can create SSRF, and configured environment variables are sent as HTTP credentials. Tool authorization and rate limiting fields are not enforced locally. Risk is moderate if server configuration or tool inputs are attacker-controlled, and lower when configuration is trusted.