Is Analytics Mcp safe to install?

SaferSkills independently audited Analytics Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.1 KB · Markdown

GitHub Analytics MCP

AI-powered GitHub repository analytics through MCP (Model Context Protocol). Analyze repositories, track contributions, and get insights directly in your AI assistant.

🚀 Quick Start

Prerequisites

Node.js 18+
Supabase account
GitHub account
Vercel account (for deployment)

Installation

Clone the repository

git clone https://github.com/yourusername/github-analytics-mcp.git
cd github-analytics-mcp
npm install

Set up Supabase

Create a new Supabase project at supabase.com
Run the migration in supabase/migrations/001_initial_schema.sql
Enable GitHub OAuth in Authentication settings
Copy your project URL and anon key

Configure environment variables

For MCP Server (mcp-server/.env):

SUPABASE_URL=your_supabase_url
SUPABASE_ANON_KEY=your_supabase_anon_key
GITHUB_TOKEN=your_github_personal_access_token

For Web App (web/.env.local):

NEXT_PUBLIC_SUPABASE_URL=your_supabase_url
NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key

Start development servers

# Start both MCP server and web app
npm run dev

# Or start individually
npm run dev --workspace=mcp-server
npm run dev --workspace=web

🔧 MCP Configuration

Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "github-analytics": {
      "command": "node",
      "args": ["/path/to/github-analytics-mcp/mcp-server/dist/index.js"],
      "env": {
        "SUPABASE_URL": "your_supabase_url",
        "SUPABASE_ANON_KEY": "your_supabase_anon_key",
        "GITHUB_TOKEN": "your_github_token"
      }
    }
  }
}

📊 Available MCP Tools

analyze_repo - Get repository statistics (stars, forks, issues, etc.)
analyze_contributors - List top contributors and their contributions
analyze_languages - Get language composition statistics
analyze_activity - Track recent PRs, issues, and commits

🎯 Example Usage in Claude

User: Analyze the repository facebook/react

Analytics Mcp— agent skill

Is Analytics Mcp safe to install?

GitHub Analytics MCP

🚀 Quick Start

Prerequisites

Installation

🔧 MCP Configuration

📊 Available MCP Tools

🎯 Example Usage in Claude

Audit the pieces. Scan the whole. Decide.