Github Intel

Analyze any GitHub repository in AI-friendly format. Convert entire repos to single markdown documents, generate architecture diagrams with Mermaid, inspect...

Security Scan

The skill appears to do what it claims (read-only GitHub repo analysis) but the SKILL.md claims 'Python stdlib only' while the included scripts import the third-party 'requests' library — an incoherence that could break installation or hide required dependencies.

Purpose & Capability

Name and description match the code and required credential: this is a GitHub analysis tool and declaring GITHUB_TOKEN (optional) as the primary credential is appropriate. Nothing in the scripts requests unrelated cloud or system credentials.

Instruction Scope

Runtime instructions and scripts are limited to read-only GitHub API and raw.githubusercontent requests, tree parsing, README inclusion, and text extraction. The code does not execute repo code or run build steps; it prints analysis and fetches file contents (with size limits).

Install Mechanism

SKILL.md claims 'Python stdlib only — no dependencies', but both scripts import the third-party 'requests' library. There is no install spec provided, so an environment lacking 'requests' will fail. This mismatch is a material incoherence (missing dependency/install instructions).

Credentials

Requesting an optional GITHUB_TOKEN to increase rate limits is proportionate to the stated purpose. No other secrets, unrelated env vars, or config paths are requested.

Persistence & Privilege

The skill is not always-on, does not modify other skills or system-wide config, and does not request persistent elevated privileges. It performs network reads only.

What to consider before installing

This skill's purpose and code are largely coherent (it fetches and analyzes public GitHub data), but the documentation falsely claims 'stdlib only' while the scripts require the third-party 'requests' library. Before installing or running: 1) ensure your agent environment has the 'requests' package or update the skill to include an install step; 2) if you provide a GITHUB_TOKEN, use a least-privilege token (or a public_repo/read-only token) and treat it like any secret; 3) review the scripts yourself (they fetch full file contents and include them in outputs) if you have concerns about pulling large or sensitive files from repositories; 4) run the tool in an isolated environment/venv to avoid dependency conflicts. If the README claim of 'stdlib only' is intentional, ask the author to either remove the 'requests' import or add an explicit install step so the dependency mismatch is resolved.

🔍 GitHub Intelligence

Analyze any GitHub repository in AI-friendly format. Convert repos to markdown, generate architecture diagrams, understand structure and patterns.

Features

• Analyze repo structure — file tree, README, language breakdown, recent activity
• Generate architecture diagrams — Mermaid flowcharts from codebase structure
• Convert repo to markdown — entire repository as a single AI-readable document
• Inspect language breakdown — percentage by language with file counts
• Track recent activity — latest commits, contributors, release history
• GitHub URL tricks — hidden features, API shortcuts, search operators
• Control analysis depth — configurable directory traversal depth
• Limit file count — cap files for large repos
• Read-only guarantee — never executes code from repositories
• Public API access — no token needed (optional token for higher rate limits)

Requirements

Variable	Required	Description
GITHUB_TOKEN	❌	Optional — increases rate limit from 60 to 5000 req/hr. Get from GitHub Settings

Quick Start

PY=~/.openclaw/workspace/.venv/bin/python3

# Analyze a repository
$PY skills/github-intel/scripts/repo_analyzer.py https://github.com/anthropics/claude-code

# Convert repo to single markdown
$PY skills/github-intel/scripts/repo_to_markdown.py https://github.com/openai/openai-python

# Deep analysis
$PY skills/github-intel/scripts/repo_analyzer.py https://github.com/user/repo --depth 3

Commands

Repo Analyzer

# Basic analysis
$PY scripts/repo_analyzer.py https://github.com/owner/repo

# Deep directory traversal
$PY scripts/repo_analyzer.py https://github.com/owner/repo --depth 3

# With authentication for higher rate limits
GITHUB_TOKEN=ghp_xxx $PY scripts/repo_analyzer.py https://github.com/owner/repo

Repo to Markdown

# Convert full repo
$PY scripts/repo_to_markdown.py https://github.com/owner/repo

# Limit files for large repos
$PY scripts/repo_to_markdown.py https://github.com/owner/repo --max-files 50

# Output to file
$PY scripts/repo_to_markdown.py https://github.com/owner/repo > repo.md

Output Format (Analyzer)

# Repository: owner/repo

## Structure
├── src/
│   ├── index.ts
│   └── ...
├── README.md
└── package.json

## README
[Full README content]

## Language Breakdown
- TypeScript: 78.2%
- JavaScript: 15.1%
- Shell: 6.7%

## Architecture (Mermaid)
graph TD
  A[CLI Entry] --> B[Command Parser]
  ...

## Recent Activity
- 2 days ago: feat: add streaming support
- 5 days ago: fix: handle timeout errors

References

File	Description
references/github-tricks.md	URL hacks, API shortcuts, search operators

Script Reference

Script	Description
{baseDir}/scripts/repo_analyzer.py	Full repository analysis with diagrams
{baseDir}/scripts/repo_to_markdown.py	Convert repo to single markdown document

⚠️ Security

This tool is READ-ONLY. It NEVER:

• Executes code from repositories
• Runs scripts, makefiles, or build commands
• Evaluates any content from repos
• Writes to any repository

All analysis is static file reading only.

Data Policy

This skill fetches public data from GitHub's API. No data is stored locally beyond the analysis output.

---

Built by M. Abidi

LinkedIn · YouTube · GitHub · Book a Call