github-discovery-scoring — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited github-discovery-scoring (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
| # | Attempt | Why Failed | Lesson |
|---|---|---|---|
| 1 | Scored by star count only | Popular generic repos (React templates) outranked niche relevant ones | Stars measure popularity, not relevance |
| 2 | Equal weight for all dependency matches | React/Tailwind matches scored same as google-adk/pgvector | Domain-specific deps need 10x weight vs generic |
| 3 | Keyword matching in description only | Missed repos with relevant dependencies but generic descriptions | Analyze actual dependencies (package.json, requirements.txt) |
score = maxOverlap // Dependency/topic match weight
+ strategyWeight // Strategy bias (tech-stack: 3.0, curated: 2.5, rising-stars: 2.0)
+ Math.min(starVelocity, 10) * 2.0 // Star velocity capped at 20 pts
+ recencyScore * 10.0 // Last push recency x 10
+ readmeQuality * 0.5; // README length normalized [0,1]
// Weighted overlap: domain-specific >> generic
weightedOverlap = specificDeps * 5.0 // google-adk, pgvector, fastapi
+ genericDeps * 0.5 // react, tailwind, express
+ specificTopics * 3.0 // agent-framework, rag
+ genericTopics * 0.3; // ai, llm, open-sourceconst GENERIC_DEPS = new Set([
'react', 'react-dom', 'typescript', 'vite', 'tailwindcss',
'express', 'axios', 'lodash', 'dotenv', 'eslint', 'prettier',
'jest', 'vitest', 'webpack', 'postcss', 'zod', 'cors',
]);
const BROAD_TOPICS = new Set([
'ai', 'llm', 'agent', 'open-source', 'typescript', 'react',
'python', 'javascript', 'machine-learning', 'api', 'cli',
]);function getRecencyMultiplier(lastPush) {
const days = (Date.now() - new Date(lastPush)) / 86400000;
if (days < 1) return 1.0;
if (days < 7) return 0.9;
if (days < 30) return 0.7;
if (days < 90) return 0.5;
return 0.3;
}| Metric | Value | Source |
|---|---|---|
| False positive reduction | ~70% fewer generic repos in top results | Hub production |
| Domain-specific repo ranking | Top 3 consistently relevant | 5-project testing |
| API budget used | 80 calls per 6hr cycle (0.7% of limit) | GitHub rate limit logs |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.