Search recent repo activities

PassAudited by ClawScan on May 1, 2026.

Overview

This is a simple read-only GitHub activity lookup, with the main consideration that it sends your repo and search filters to the Nom service.

This skill appears safe for its stated purpose. Before using it, remember that your repository, organization, and search filters are sent to the Nom beta service, so avoid entering sensitive private terms.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Repo names, organization names, date filters, and search text you provide may be included in requests to beta.nomit.dev.

Why it was flagged

The skill authorizes curl network requests to fetch Nom feed data. This is expected for the stated purpose, but users should recognize that query arguments are sent to an external service.

Skill content
allowed-tools: ["Bash(curl:*)"] ... Base URL: `https://beta.nomit.dev` ... Use curl to fetch the response.
Recommendation

Use it for public GitHub activity searches and avoid putting private or sensitive information into search terms.