AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Gitgauge

skill-davey2waveyy-gitgauge-skill · by Davey2Waveyy

Use when a full GitHub repository URL (github.com/owner/repo) appears in conversation, when the user asks to check, review, or analyze a GitHub repo, or when the user runs /gitgauge. Does not trigger on npm packages, file paths, org pages, or issue/PR links.

No reviews yet
0 installs
14 views
0.0% view→install

Install

$ agentstack add skill-davey2waveyy-gitgauge-skill

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-davey2waveyy-gitgauge-skill)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
4mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Gitgauge? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

GitGauge

Score GitHub repos for authenticity. Mirrors the GitGauge Chrome extension algorithm exactly.

The GitGauge output line is the announcement — no separate announce needed. Run the scorer first, then engage with the repo.

When to run

| Trigger | Output mode | |---------|-------------| | GitHub URL appears passively in conversation | Compact one-liner, then continue | | User asks to review / analyze a repo | Compact score + brief breakdown, then review | | User runs /gitgauge owner/repo | Full report: sub-scores, flags, metadata |

Do not run on:

  • GitHub profile URLs, org pages, gist links, issue links, PR links, or commit links
  • npm package references (@scope/package), file paths, or bare owner/repo with no GitHub URL context
  • Repos already scored in the current conversation

Running the scorer

python ~/.claude/skills/gitgauge/scripts/score.py owner/repo
# macOS / Linux: use python3 instead of python

With a token (removes rate limit):

python ~/.claude/skills/gitgauge/scripts/score.py owner/repo --token ghp_yourtoken

For the full report mode (parse JSON to build structured output):

python ~/.claude/skills/gitgauge/scripts/score.py owner/repo --json

Pass full GitHub URLs too — the script strips the github.com/ prefix automatically.

Output formats

Compact (passive trigger)

GitGauge: 🟢 4.1/5.0 — Likely Authentic

Standard (review / analyze trigger)

GitGauge: 🟢 4.1/5.0 — Likely Authentic
⭐ 2,400 stars  🍴 310 forks  👁 47 watchers  🐛 18 issues
Fork ratio: 12.9%  |  Watcher ratio: 1.96%  |  Issue ratio: 0.75%

Full report (/gitgauge command)

Use --json output. Show score, label, all ratios, sub-scores, flags, and metadata (language, description, topics).

Score labels

| Score | Label | Emoji | |-------|-------|-------| | 1.0–1.4 | Likely Fake | 🔴 | | 1.5–2.4 | Suspicious | 🟠 | | 2.5–3.4 | Mixed Signals | 🟡 | | 3.5–4.4 | Likely Authentic | 🟢 | | 4.5–5.0 | Highly Authentic | ✅ |

Warning threshold

If score ⚠️ GitGauge flagged owner/repo as Suspicious (1.8/5.0)** — low engagement relative to star count may indicate star farming or an inactive project. Proceeding anyway.

Never block the user — the score is additive context, not a gate.

Error handling

| Error | What to show | |-------|-------------| | 404 / not found | GitGauge: ❌ Repo not found or private — skipping score | | Rate limited | GitGauge: ⚠️ Rate limited — pass --token to continue (see Token Setup below) | | Unscoreable (< 50 stars) | GitGauge: ⚪ Unscoreable — fewer than 50 stars | | Bad token | GitGauge: ❌ GitHub token invalid or expired |

In all error cases: continue engaging with the repo normally.

Edge case flags

The script returns these flags in output — always surface them:

| Flag | What to tell the user | |------|-----------------------| | is_fork | "This is a fork — metrics reflect fork activity, not the original repo" | | archived | "Repo is archived — activity metrics are frozen" | | low_stars | "Under 100 stars — signal may not be reliable" | | new_repo | "Under 30 days old — insufficient history for a reliable score" |

Zero issues + many stars: Script automatically scores this as 1.5 (Suspicious). Large repos with zero open issues usually have issues disabled, not zero bugs.

Token setup (optional)

Without a token: 60 GitHub API requests/hour per IP. Sufficient for most sessions.

  1. Create a token at https://github.com/settings/tokens — no scopes needed for public repos
  2. Pass inline: --token ghp_yourtoken
  3. Or set GITHUB_TOKEN in your environment and update the Bash call to read $GITHUB_TOKEN

Scoring algorithm

Full implementation is in scripts/score.py — a direct port of the GitGauge Chrome extension.

  • Minimum threshold: repos with < 50 stars return unscoreable
  • Fork score (weight: 35% with watchers, 55% without): forks ÷ stars
  • Watcher score (weight: 35%, omitted if watchers = 0): watchers ÷ stars
  • Issue score (weight: 30% with watchers, 45% without): issues ÷ stars
  • Final score clamped to [1.0, 5.0], rounded to one decimal

Breakpoints and interpolation logic are defined as constants at the top of score.py.

Quick reference

| Situation | What to do | |-----------|------------| | GitHub URL in message | Run scorer → compact one-liner → continue | | "Review this repo" | Run scorer → standard output → review | | /gitgauge owner/repo | Run scorer with --json → full report | | Score < 2.5 | Show warning before engaging, then proceed | | Any API error | Show error line, still engage with repo | | Flag in output | Always mention it to the user | | Already scored this session | Skip — don't score twice |

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.