Search and analyze trending GitHub repositories by topics, star count, and creation date. Supports filtering by multiple tags, minimum stars, and time range....
Security Analysis
high confidenceThe skill's code and instructions match its stated purpose (searching GitHub repos); it only talks to api.github.com and optionally reads GITHUB_TOKEN for rate limits — no unrelated credentials, installs, or hidden endpoints were found.
Name/description (discover trending GitHub repos) align with the included Python script and references. The optional GITHUB_TOKEN is appropriate for increased GitHub API rate limits.
SKILL.md instructs running the bundled script and suggests exporting GITHUB_TOKEN (e.g., adding to ~/.zshrc). Aside from that, instructions do not ask the agent to read unrelated files or transmit data to endpoints other than api.github.com. Note: recommending writing a token into ~/.zshrc is a user-facing suggestion that stores secrets in plaintext shell config; consider safer handling.
No install spec; this is instruction-only with one included Python script. No downloads or archive extraction, and no packages are installed automatically.
No required environment variables. GITHUB_TOKEN is optional and justified solely for higher rate limits. Confirm you only provide a token with minimal needed privileges (public search does not require repo write scopes).
Skill does not request permanent 'always' presence and does not modify other skills or system configuration. The only persistence-related suggestion is a user-facing example that appends GITHUB_TOKEN to ~/.zshrc (not performed by the skill itself).
Guidance
This skill appears coherent and limited to calling the public GitHub Search API. Before installing: (1) inspect the included script locally (it is short and readable); (2) if you provide a GITHUB_TOKEN, create a token with minimal scope (no write scopes needed for public searches) and avoid pasting long-lived secrets into shared shell files if you are concerned — prefer session-only exports or a short-lived/fine-grained token; (3) run the script locally first to confirm behavior; and (4) if you allow autonomous agent invocation, remember it could run the script without prompting, but this skill's network calls are limited to api.github.com.
Latest Release
v1.0.5
- Initial release of GitHub Projects Explorer (version 1.0.0). - Search and filter trending open-source projects on GitHub by topic, star count, creation date, programming language, and tags. - Supports multiple tag filters, star and date ranges, and smart sorting by stars, forks, update date, or creation date. - Optional GitHub token support for higher API rate limits. - Provides clear usage instructions, example commands, and suggestions for common scenarios and troubleshooting.
More by @AlphaFactor
Published by @AlphaFactor on ClawHub
