github-trending

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the user or agent to execute a local Python script, scripts/fetch_trending.py, which is included as part of the skill's package. This script is used for its intended purpose of scraping GitHub's public trending pages.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of common, well-known Python packages (requests, beautifulsoup4, lxml) from the official PyPI registry, as specified in the requirements.txt file.
  • [DATA_EXFILTRATION]: Network operations are restricted to fetching public data from github.com. No sensitive data is accessed or transmitted to external servers.
  • [SAFE]: The implementation follows best practices by using a script to produce structured JSON data for the agent to process, rather than having the agent directly parse raw HTML, which reduces the surface area for indirect prompt injection or processing errors.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 12:35 AM
Security Audit — agent-trust-hub — github-trending