Oathe Security Badge

Is lisniuse/github-trending-skill safe?

Yes. lisniuse/github-trending-skill is safe to install. Oathe's behavioral security audit gave the github-trending-skill skill by lisniuse a trust score of 92/100 with 4 findings, none critical or high. Report updated

https://github.com/lisniuse/github-trending-skill

92
SAFE

Is lisniuse/github-trending-skill safe to install?

This skill is a legitimate GitHub trending repository scraper that performs exactly as described. It makes HTTP requests only to GitHub's public trending pages and saves data locally to JSON files. No malicious behavior, sensitive file access, or security vulnerabilities were detected.

What security issues were found in lisniuse/github-trending-skill?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 85/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 85/100 · 5%

Findings (4)

LOW Executable Python Script -15

The skill contains a Python script that performs web scraping operations. While legitimate, it represents executable code that could potentially be modified.

LOW External HTTP Requests -10

The script makes HTTP requests to GitHub's trending page to scrape repository data. This is the intended functionality but represents external network activity.

INFO Network Activity During Installation -5

Standard git clone operation resulted in network connections to GitHub servers.

INFO Documentation Contains Shell Commands -5

SKILL.md contains bash command examples, which is normal for documentation but represents potential command execution instructions.

Should I install lisniuse/github-trending-skill?

Oathe's verdict for lisniuse/github-trending-skill is SAFE with a trust score of 92/100. Recommendation: Install.