Defensive GitHub account & repository security auditing in the browser, CLI, and GitHub Actions.

Paste a GitHub username or profile URL and inspect accessible public repositories with context-aware static analysis — without executing target code.

Checks include:

• secret / seed / private-key exposure signals
• suspicious data-exfiltration patterns
• clipboard and wallet-address replacement behavior
• wallet approvals and transaction capability
• dangerous install scripts and obfuscation
• repository hygiene, history and contribution context
• repository-by-repository scoring with file/line evidence
• English + فارسی web interface

A clean scan is not proof that a person is trustworthy, and a warning is not proof that a person is a scammer. The project reports observable technical signals from scanned coverage.

GitHub Trust Auditor یک ابزار دفاعی برای بررسی اکانت و ریپوهای عمومی GitHub است. کد پروژه هدف را اجرا نمی‌کند و برای هر اکانت، امتیاز کلی، امتیاز تک‌تک ریپوها، سیگنال‌های امنیتی و شواهد فایل/خط ارائه می‌دهد.

اسکن آنلاین: https://samalpha1.github.io/GitHubTrustAuditor/

• security-sensitive code should fail safely
• secrets belong in environment/config boundaries, never in source control
• monitoring and inspection tools should be read-only by default
• useful output should include evidence, not just a score
• automation should remain understandable and reproducible

If any of these repositories are useful to you, follow the account, star the projects you use, and open issues with reproducible feedback.

• GitHub: github.com/SamAlpha1
• X / Twitter: @samalpha_
• GitHub Trust Auditor: Live Scanner
• Launch post: View on X