AgentXray for GitHub
A grade appears beside the name of every GitHub repo you open. Hover it for the top findings, click it for the full report.
Without a token GitHub allows about 30 repo scans per hour. A fine-grained token with no permissions at all (public repos only) raises that to about 2,500. It is stored only in this browser and sent only to api.github.com.