GitHub Trending Feed

• Analyzed: Mar 22, 2026, 4:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: 95a85b8d46acfacc2aa6f9d83daeafc536b372a5f55a342c7a4cb8e654fa0698
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate utility for fetching GitHub trending repositories. The Python script (scripts/fetch_trending.py) uses standard libraries to scrape the GitHub trending page and query the GitHub API for repository details, with no evidence of data exfiltration, malicious execution, or prompt injection.