GitHub Repo Analyzer

Analyze GitHub repositories to provide statistics, contributor activity, programming languages, and issue and PR trends.

Security Scan

The skill's code, instructions, and requirements line up with its stated purpose: it runs a small Node script that queries the public GitHub API to produce repository statistics and contributor/language data and does not request unrelated credentials or access.

Purpose & Capability

Name/description match the included artifacts. The single JS file implements repo stats, languages, contributors and dates via api.github.com — exactly the advertised capabilities. No unrelated services, binaries, or credentials are requested.

Instruction Scope

SKILL.md instructs the agent to analyze repo URLs and expose the analyze_repo tool; it does not instruct reading local files, other environment variables, or transmitting data to unexpected endpoints. The runtime behavior (calling api.github.com) is consistent with the instructions.

Install Mechanism

No install spec is provided (instruction-only runtime plus an included script). No downloads from external URLs or archive extraction occur. The included script is small and readable; executing it requires a Node runtime but nothing is written to disk by an installer.

Credentials

The skill requests no environment variables or credentials. The code performs unauthenticated requests to the public GitHub API (no tokens are required). If a user later provides a GitHub token to raise rate limits, that would be a separate decision and should be treated cautiously.

Persistence & Privilege

The skill is not marked always:true and does not request persistent system changes. It simply runs a script that performs outbound HTTPS requests; it does not modify other skills or global agent settings.

Assessment

This skill appears coherent and small: it runs a bundled Node script that queries api.github.com and prints JSON. Before installing, ensure your agent environment allows running Node scripts and that making outbound HTTPS calls to api.github.com is acceptable. Note unauthenticated GitHub API requests are rate-limited (≈60/hr); supplying a GitHub token would increase limits but would require you to trust the skill with that credential. Review the included script yourself (it's short and readable) if you have concerns about network activity before enabling it.

GitHub Repo Analyzer Skill

Analyze GitHub repositories to get insights on activity, contributors, and tech stack.

Capabilities

• Fetch repository statistics
• Analyze contributor activity
• Detect programming languages and tech stack
• Track issue and PR trends

Commands

• "Analyze github.com/facebook/react"
• "Show stats for vercel/next.js"
• "What languages does kubernetes use?"

Tools

analyze_repo

Get comprehensive repository analysis.

Usage: "Analyze [repo-url]"

Pricing

$2/month subscription

Author

Dev Tools Pro