Skip to content
Back to skills

Discover Contributor Repositories

ASecurity

Discover and rank active public GitHub repositories that are suitable for bounded external contributions. Use when running or reviewing the Scout squad, changing repository search/filter heuristics, assessing repository health and contribution readiness, or producing state/candidates.json without selecting a specific issue.

  • 85 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 3, 2026
devopsjavascripttypescriptpythongojavashellgitapi

Works with

  • api

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 3, 2026

npx -y skills add elixpo/elixpo_chapter --skill discover-contributor-repositories --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Discover Contributor Repositories?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Discover Contributor Repositories
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/elixpo-discover-contributor-repositories/badge)](https://www.skillsdirectory.com/skills/elixpo-discover-contributor-repositories)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: discover-contributor-repositories
description: Discover and rank active public GitHub repositories that are suitable for bounded external contributions. Use when running or reviewing the Scout squad, changing repository search/filter heuristics, assessing repository health and contribution readiness, or producing state/candidates.json without selecting a specific issue.
---

# Discover Contributor Repositories

Find repositories where a respectful external contribution is plausible. Produce
a diverse candidate pool for Triage; never claim that a repository is easy merely
because it is popular or has open issues.

## Preserve the squad boundary

- Discover repositories only. Leave issue-level solvability to Triage.
- Make no model call. Use GitHub search metadata and bounded repository checks.
- Write only `state/candidates.json`.
- Do not comment, fork, open a pull request, assign an issue, or contact maintainers.
- Treat an API failure as missing evidence. Skip or down-rank; never invent data.

## Apply hard repository filters

Reject a repository when any condition holds:

- It is archived, disabled, a fork, or has Issues disabled.
- It has no declared license.
- Its primary language is outside `config/languages.yaml`.
- It is outside the configured star range or inactive beyond the activity window.
- It appears in the ledger blocklist.
- Its topics include an elixpoo opt-out or a no-automated-contributions signal.
- It has no open issue surface.

Never weaken an explicit opt-out to increase candidate count.

Target growing projects with enough maintenance evidence but room for a new
contributor: 100–15,000 stars and a default-branch push within 21 days. Repositories
above that ceiling are out of scope, even when they rank highly or carry many
contributor-oriented labels.

Restrict the primary-language search to Python, TypeScript, JavaScript, and Shell.
Keep separate `(star band, language)` queues and round-robin across them so a large
Python result surface cannot erase the other supported languages.

## Rank for contribution readiness

Rank eligible repositories using evidence in this order:

1. Contribution instructions are present.
2. The default branch has recent activity.
3. The open-issue surface is manageable rather than abandoned or overloaded.
4. A declared license and enabled Issues confirm basic contribution readiness.
5. Stars provide only a weak health signal.

Do not reward huge backlogs as if every open issue were available. Maintain the
100–2,000, 2,001–8,000, and 8,001–15,000 band round-robin so established projects
do not crowd out maintained smaller repositories.

## Keep discovery bounded

- Search Python, TypeScript, JavaScript, and Shell within each star band.
- Do not require `good-first-issues:>0`; repository discovery must not make an
  issue-level solvability decision.
- Deduplicate by case-sensitive `owner/name`.
- Check CONTRIBUTING only for a bounded finalist pool.
- Cap output at the configured candidate limit.
- Preserve the evidence-backed score and reasons in every candidate record.

## Produce an auditable handoff

For each candidate, emit repository identity, URL, primary language, stars,
activity timestamp, topics, issue counts, size band, contribution-guide flag,
score, and reasons. Keep output deterministic for the same GitHub snapshot.

Before finishing, verify that every output repository passed every hard filter,
the list contains no duplicates, all star bands had a fair opportunity, and no
public or cross-repository write occurred.

Files in this skill

  • SKILL.md3.5 KB
  • agents/openai.yaml255 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.