GitHub AI Trends Reporter

• Risk level: Low
• Analyzed: Feb 24, 2026, 4:13 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code and instructions match its description: it queries the GitHub API for AI-related repos and formats a leaderboard; nothing requested or installed is disproportionate to that purpose.

This skill appears to do exactly what it claims: query GitHub and format a leaderboard. Before installing or running it, review the included script (already small and readable), and consider these practical points: (1) If you provide a personal GITHUB_TOKEN, prefer setting it in the environment (GITHUB_TOKEN) rather than on the command line to avoid exposure in process listings. (2) An authenticated token could cause results to include private repos visible to that token — avoid using a token with broad scopes if you don't want private repo metadata leaked into chat. (3) The script only talks to api.github.com; if you want to be extra cautious, run it locally and inspect output before copying results into any external chat. (4) Note the _meta.json shows differing owner/version metadata compared with the registry entry — likely a packaging metadata mismatch; it’s not a runtime threat but worth verifying the source if provenance matters.