bulk-github-star
Warn
Audited by Socket on Mar 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The reviewed code fragment aligns with its stated goal of bulk-starring a user’s public repositories via the official GitHub CLI. It maintains a clean separation between input data (username), actions (star each repo), and output (summary). The main risks are operational (rate-limiting, unintended bulk actions) rather than security/perimeter risks. A unified, safe usage pattern should include explicit user confirmation, consistent delay handling, and centralized error handling across both Bash and Node.js paths.
Confidence: 75%Severity: 75%
Audit Metadata