github-stars

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script executes the gh (GitHub) CLI to search for repositories and fetch stargazer metadata. This is the intended functionality of the skill and uses the user's local authentication.
  • [EXTERNAL_DOWNLOADS]: The skill makes legitimate API calls to api.github.com via the gh CLI to retrieve public repository information.
  • [DYNAMIC_EXECUTION]: A Python script is executed via a heredoc within the shell script to process timestamps and render ASCII charts. The input to the Python script is limited to timestamps fetched from the GitHub API and environment variables for configuration (timezone, day counts), presenting no significant risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 09:40 PM
Security Audit — agent-trust-hub — github-stars