github-label-scout — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited github-label-scout (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when a user wants to find claimable open issues in a public repo by label - "good first issue", "help wanted", "bug" - without wasting time on issues someone already owns. It hits the public REST API, filters out the pull requests the issues endpoint mixes in, and skips anything with an assignee so you only see open lanes. No token is needed for low volume; set one in the env only to raise the rate limit.
User input:
Show me unassigned "good first issue" tickets in octocat/Hello-World.Output:
# Copy assets/scout.py into your project, then:
from scout import scout_label
for row in scout_label("octocat/Hello-World", "good first issue"):
print(f"#{row['number']} {row['title']} ({row['comments']} comments) {row['url']}")
# #142 Fix typo in README (1 comments) https://github.com/octocat/Hello-World/issues/142
# #156 Add retry to client (0 comments) https://github.com/octocat/Hello-World/issues/156The helper reads an optional GITHUB_TOKEN from the environment purely to raise the rate limit; it works unauthenticated.
GET /repos/{owner}/{repo}/issues?state=open&labels=<label>.pull_request key - the issues endpoint returns PRs too.assignees array (assignee-first rule: assigned = already taken).GITHUB_TOKEN from env only for rate-limit headroom; never hardcode a token.Reference: assets/scout.py.
Distilled from production use across the author's automation projects. v1.0.0. See also: [[algora-bounty-scout]], [[pr-body-formatter]].
→ Build the full runnable bot with Trawlkit.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.