skill-github-project-analyzer

PassAudited by ClawScan on May 16, 2026.

Overview

This instruction-only skill appears to do what it says: analyze public GitHub projects using web research and save a Markdown report.

This skill looks safe to install as an instruction-only GitHub analysis helper. Be aware that it depends on web research and will save a Markdown report locally; avoid giving it private repository details unless your agent environment is allowed to browse and process that information.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

The agent may access GitHub and other public web pages, then create a report file on the local system.

Why it was flagged

The skill directs the agent to browse public web sources and write a local Markdown report. This is tool use and file output, but it is disclosed, scoped, and aligned with analyzing a GitHub project.

Skill content

用 `fetch_web` 读取 GitHub 项目页面 ... 用 `search_web` 搜索 ... 保存到 `./GitHub项目分析/` 目录

Recommendation

Use it for public or intended-to-share repositories, and review the generated report path and contents before relying on or sharing the report.