github-repo-researcher — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited github-repo-researcher (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when you need to:
Before running any other command:
If jq is not on $PATH, install it:
# Install using Homebrew (macOS/Linux)
brew install jq
# Alternatively using apt (Debian/Ubuntu)
sudo apt-get update && sudo apt-get install -y jq
# Alternatively using apk (Alpine)
sudo apk add jq
# Then verify installation
jq --versionIf repomix is not on $PATH, install it:
# Install using npm
npm install -g repomix
# Alternatively using yarn
yarn global add repomix
# Alternatively using bun
bun add -g repomix
# Alternatively using Homebrew (macOS/Linux)
brew install repomix
# Then verify installation
repomix --versionrepomix --remote <url> --style json --compress --output /tmp/<repo-name>-analysis.json./tmp/<repo-name>-analysis.json with jq -r '.fileSummary | to_entries | map("\(.key):\n\(.value)") | join("\n\n")' /tmp/<repo-name>-analysis.json.jq -r '
.files
| to_entries[]
| select(
(.key | test("(^|/)README\\.md$"))
or (.key | test("(^|/)CLAUDE\\.md$"))
or (.key | test("(^|/)AGENTS\\.md$"))
or (.key == "CONTRIBUTING.md")
or (.key == "SECURITY.md")
)
| "===== " + .key + " =====\n" + .value + "\n"
' /tmp/<repo-name>-analysis.jsonjq -r '
.files
| keys[]
| select(
test("(^|/)(README|CONTRIBUTING|SECURITY|CHANGELOG|CLAUDE|AGENTS|FAQ|INSTALLATION|USAGE|GUIDE)(\\.[^/]+)?$"; "i")
or test("(^|/)(docs|documentation)/"; "i")
)
' /tmp/<repo-name>-analysis.jsonjq -r '.files["<file-name>"]' /tmp/<repo-name>-analysis.jsonjq -r '.directoryStructure' /tmp/<repo-name>-analysis.json \
| awk '{
match($0, /^ */)
depth = RLENGTH / 2
if (depth <= 1) print
}'jq -r '
.files
| keys[]
| select(startswith("<directory>/"))
' /tmp/<repo-name>-analysis.jsonjq -r '.files["<file-name>"]' /tmp/<repo-name>-analysis.jsonjq to search across files. Run as many searches as necessary to fully address the research goal and answer the core questions with confidence.Note: jq uses the Oniguruma regular expression library.
By regular expression:
jq -r '
.files
| to_entries[]
| select(.value | test("repomix|mcp|compression"; "i"))
| .key
' /tmp/<repo-name>-analysis.jsonBy substring:
jq -r '
.files
| to_entries[]
| select(.value | contains("repomix"))
| .key
' /tmp/<repo-name>-analysis.jsonBy whole word:
jq -r '
.files
| to_entries[]
| select(.value | test("\\brepomix\\b"; "i"))
| .key
' /tmp/<repo-name>-analysis.jsonrepomix --remote https://github.com/yamadashy/repomix/tree/main --style json --compress --output /tmp/repomix-analysis.jsonjq -r '.fileSummary | to_entries | map("\(.key):\n\(.value)") | join("\n\n")' /tmp/repomix-analysis.jsonjq -r '.files | to_entries[] | select((.key | test("(^|/)README\\.md$")) or (.key | test("(^|/)CLAUDE\\.md$")) or (.key | test("(^|/)AGENTS\\.md$")) or (.key == "CONTRIBUTING.md") or (.key == "SECURITY.md")) | "===== " + .key + " =====\n" + .value + "\n"' /tmp/repomix-analysis.jsonjq -r '.files | keys[] | select(test("(^|/)(README|CONTRIBUTING|SECURITY|CHANGELOG|CLAUDE|AGENTS|FAQ|INSTALLATION|USAGE|GUIDE)(\\.[^/]+)?$"; "i") or test("(^|/)(docs|documentation)/"; "i"))' /tmp/repomix-analysis.jsonjq -r '.files["README.md"]' /tmp/repomix-analysis.jsonjq -r '.directoryStructure' /tmp/repomix-analysis.json | awk '{ match($0, /^ */); depth = RLENGTH / 2; if (depth <= 1) print }'jq -r '.files | keys[] | select(startswith("src/"))' /tmp/repomix-analysis.jsonjq -r '.files | to_entries[] | select(.value | test("repomix|mcp|compression"; "i")) | .key' /tmp/repomix-analysis.jsonjq -r '.files | to_entries[] | select(.value | contains("repomix")) | .key' /tmp/repomix-analysis.jsonjq -r '.files | to_entries[] | select(.value | test("\\brepomix\\b"; "i")) | .key' /tmp/repomix-analysis.json~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.