Security checks across malware telemetry and agentic risk
This skill coherently analyzes a user-supplied GitHub repository or local folder and generates reports, with some expected privacy and workspace-cleanup considerations.
Install only if you are comfortable with the agent reading the repository or local folder you ask it to analyze. Avoid pointing it at sensitive private code unless your agent/LLM environment is approved for that data, and do not store important manual work inside the generated ./workspace/<owner>__<repo>/ clone folder because reruns may replace it.
def clone(owner: str, repo: str, branch: str | None, workdir: Path):
target = workdir / f"{owner}__{repo}"
if target.exists():
subprocess.run(["rm", "-rf", str(target)], check=True)
cmd = ["git", "clone", "--depth=1"]
if branch:
cmd += ["--branch", branch]63/63 vendors flagged this skill as clean.