Incorrect user attribution in a task suggestion involving the GitHub MCP integration

Aperta
#3,504 1 commento 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 2 giorni

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
5/5
Tempo stimato
Più di una settimana
Idoneità per principianti
12/100
Tipo di issue
Bug
Chiarezza
Da chiarire
Stato di attività
Attiva
Stack tecnologico
github
Ambito
ai, authentication

Direzione di ricerca

The report does not name any file, test, or entry point, so the first step is to reproduce it: check which account the GitHub MCP tools authenticate as and how they resolve the authenticated user's comment history. Whether the cause sits in suggestion generation, session context, or the MCP server is unknown and needs a maintainer's guidance. Done would mean the origin of the misattribution is identified or a fix direction is agreed on.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

bug

Description

While using ChatGPT with the GitHub MCP integration, I received an automatic suggestion to review [growthbook/growthbook#7309](https://github.com/growthbook/growthbook/pull/7309), a repository I do not recognize as related to my work.

The suggestion claimed that I had already replied “Fixed.” to a review comment at 19:38 UTC. However, verification through the GitHub MCP tools showed that the comment was written by a different account.

Verified evidence

The reply addressed a Cursor bot review requesting that a description be truncated to 80 characters. It was not posted by my authenticated account.

Actual behavior

The automatically suggested task presented another user's activity as my own and instructed the assistant to continue work on that PR.

The assistant began reading the repository through the GitHub MCP integration before I clarified that I did not recognize the task. No code changes or comments were submitted.

Expected behavior

  • Verify account identity before attributing GitHub activity to the user.
  • Explain why a repository or PR is relevant to a personalized suggestion.
  • Avoid presenting another account's comments as the authenticated user's history.

Investigation requested

Please investigate why this PR was suggested to my session and why activity by allileong was attributed to williambelini-maker.

The incorrect attribution is confirmed. Its technical origin is unknown: I cannot determine whether it originated in suggestion generation, context handling, or the GitHub MCP integration. This report does not establish a data leak or cross-account access.

Lingua principale
Go
Stelle
34.2k
Fork
5.3k
Merge medio
5g 18h
PR unite (30g)
13

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di github/github-mcp-server

Tutte le issue di github/github-mcp-server

Issue simili

Altre issue su Go

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.