Git Repo Auditor

This skill appears coherent and operates locally using git and Python. Before installing or running it: (1) only scan repositories you own or have permission to inspect — the tool reads full commit history and file contents; (2) the output can contain sensitive secrets detected in commits, so avoid exposing reports to third parties and rotate any keys you discover; (3) default regexes include a very generic "generic_token" pattern that may produce many false positives — consider customizing patterns; (4) large repositories may be slow and the script limits blob checks for performance; (5) the skill's source/homepage is unknown — if you need stronger assurance, review the full scripts/main.py file locally for any network I/O or hidden behavior before use.