Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: sylwia-budzynska

src/seclab_taskflows/mcp_servers/codeql_python/mcp_server.py

@@ -13,17 +13,17 @@
 
 from pydantic import Field
 #from mcp.server.fastmcp import FastMCP, Context
-from fastmcp import FastMCP, Context # use FastMCP 2.0
+from fastmcp import FastMCP # use FastMCP 2.0
 from pathlib import Path
 import os
 import csv
 import json
 from sqlalchemy import create_engine
 from sqlalchemy.orm import Session
 
-import zipfile
-import httpx
-import aiofiles
+
+
+
 from .codeql_sqlite_models import Base, Source
 
 MEMORY = Path(os.getenv('CODEQL_SQLITE_DIR', default='/app/my_data'))
@@ -164,6 +164,8 @@ def remote_sources(owner: str, repo: str,
     results = _run_query('remote_sources', database_path, language, {})
 
     # Check if results is an error (list of strings) or valid data (list of dicts)
+    if isinstance(results, str):
+        return f"Error: {results}"
     if results and isinstance(results[0], str):
         return f"Error: {results[0]}"
 

src/seclab_taskflows/taskflows/audit/remote_sources_local.yaml

@@ -66,7 +66,7 @@ taskflow:
         If it is a web endpoint, identify the routing path that reaches this source, HTTP method,
         any middlewares used, which roles are allowed to call it.
         Note which kind of authentication is required for that endpoint.
-        It is possible that the source does not have require any authentication.
+        It is possible that the source does not require any authentication.
         If authorization is required, note the details.
         Analyze the code and identify if this source could lead to a security vulnerability.
 

src/seclab_taskflows/toolboxes/codeql_python.yaml

@@ -65,7 +65,7 @@ server_prompt: |
   file starting at line 1, column 2 and ending at line 3, column 4. These line
   and column indices are 1-based, meaning line and column values start at 1.
 
-  If the region is ommitted the full contents of the file will be returned,
+  If the region is omitted the full contents of the file will be returned,
   for example `file:///path/to/file` returns the full contents of
   `/path/to/file`.