Is qingcaizz/github-trending-tracker safe?
Yes. qingcaizz/github-trending-tracker is safe to install. Oathe's behavioral security audit gave the github-trending-tracker skill by qingcaizz a trust score of 93/100 with 3 findings, none critical or high.
https://github.com/qingcaizz/github-trending-tracker
Is qingcaizz/github-trending-tracker safe to install?
This is a legitimate GitHub trending repository tracker that fetches trending project data and generates bilingual reports. The skill contains executable code and makes external API calls for translation services, but all functionality appears to match its stated purpose with no malicious behavior detected.
What security issues were found in qingcaizz/github-trending-tracker?
Category Scores
Findings (3)
MEDIUM External Translation API Calls -10 ▶
The skill makes HTTP requests to Google Translate API to translate repository descriptions from English to Chinese. While legitimate for the tool's functionality, this represents data being sent to external services.
LOW Executable JavaScript Code -15 ▶
The skill contains executable Node.js scripts that perform web scraping and file operations. The code appears benign and necessary for the tool's functionality.
LOW File System Access -10 ▶
The skill creates directories and files in the user's home directory (~/.claude/github-trending/). While scoped appropriately, this represents access beyond typical skill boundaries.
Should I install qingcaizz/github-trending-tracker?
Oathe's verdict for qingcaizz/github-trending-tracker is SAFE with a trust score of 93/100. Recommendation: Install.