Skills/ClawHub/github-repo-due-diligence-lite

github-repo-due-diligence-lite@1.1.0

VERIFIED

Publisher claims: "Quick health check on a public GitHub repo before depending on it — stars, days since last push, license, archived flag, and a health heuristic. Single unauthenticated API call. Use when the user asks whether a GitHub repo is maintained, trustworthy, or safe to adopt." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher nenadzivotic · joined 0 days agoInstalls 134Last detonated 1 h ago
$npx skills add github-repo-due-diligence-lite
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageREADME.md:8 · npx invocation of non-well-known package — may execute untrusted code
AST06

No other findings across 236 lines in 5 files.