01 · Roasts
Speed-Run Codebase
DamnVulnerableRemixApp was created AND fully pushed in a ~3-minute window. That's not a project, that's a git dump. Even CTF challenges deserve a second commit.
79 Commits in 52 Weeks
Your public heatmap looks like a hospital ECG with the patient mostly flatlined. 79 commits across a full year is roughly 1.5 commits per week — and most weeks are dead air.
README? Never Heard of Her
Your most actively-maintained repo (cap) has no README. It's a personal blog about security philosophy and it can't document itself. The irony is architectural.
95 Stars, Zero Escape Velocity
95 total stars spread across 62 repos works out to ~1.5 stars per repo. Prolific quantity, minimal signal — your best single project has 5 stars.
Born to RE, Forced to Websec, Committed to Neither
Bio says reverse engineer at heart, repos say CTF dumper and blogger. 0 public RE tools, 0 binary analysis repos, and the closest thing is a markdown SKILL template file.
Built using
Zoral
Shadows one worker for a week, then takes over their job with zero extra setup. Behaves exactly like the original.
zoral.ai
02 · Category breakdown
- Impact25% weight36F
- Consistency20% weight55D
- Quality20% weight42D
- Depth15% weight35F
- Breadth10% weight65C
- Community10% weight40D
03 · Stats
365-day commit heatmap
26 active days
Language distribution
- Python33%
- TypeScript20%
- Java14%
- SCSS8%
- Shell7%
- JavaScript6%
- Other12%
04 · Numbers
Owned repos
non-fork
24
Commits
last 12 months
79
Followers
27
Joined GitHub
Jul 2018
05 · Top repos
1ikeadragon /
awesome-offsec-claude
Collection of Claude SKILL definitions for offensive security workflows (recon, code review, binary analysis, AI attacks). Minimal documentation, no tests/CI, early-stage project with structured templates but light execution maturity.
1ikeadragon /
cap
Personal Jekyll blog with 3 essay posts and polished dark/light theme UI (site.js, SCSS styling). No README, no tests, minimal production scope. Experimental content site.
1ikeadragon /
DamnVulnerableRemixApp
Educational CTF/vulnerability demo built in TypeScript/Remix with 10 intentional security flaws (SQL injection, XSS, IDOR, privilege escalation, SSRF). Very recent (~1 week old), minimal commits, no tests beyond smoke.sh, deliberately vulnerable.
06 · Timeline
- Jul 7, 2018Joined GitHub
- Aug 8, 2025Created cap — blog or sum shit
- Jan 14, 2026Created awesome-offsec-claude — Claude SKILLs and offensive security workflows for reconnaissance, vulnerability analysis, and exploitation support.
- Mar 20, 2026Created DamnVulnerableRemixApp — DamnVulnerableRemixApp
- Apr 18, 2026Most recent push to cap
07 · Compare
08 · Rubric
How this score was produced
Overall = Σ (category × weight) + gentle top-end curve
Tier thresholds
▸ How the pipeline works
- 01Scrape.Pull every non-fork repo pushed in the last 90 days, plus your contribution calendar, followers, and language byte counts — straight from GitHub's REST & GraphQL APIs.
- 02Triage.A small model reads every repo's file tree + README and picks the 20 files per repo that actually reveal how you code.
- 03Grade each repo. All repos run in parallel through a fast scoring model that reads the picked files and rates each one independently on Impact, Quality, and Depth — with evidence citations.
- 04Aggregate. A larger reasoning model combines the per-repo scores with server-computed stats (heatmap, commit cadence, language entropy, follower count) to produce the 6-dimension profile score + roasts.
- 05Correct.Deterministic server-side checks enforce anchor-scale floors (e.g. a profile with 2,000+ public commits can't score 30 Consistency) and recompute the final verdict.
~90 seconds per profile, ~$0.25 in compute. Total of ~240 files read across your top-12 repos. One rating per GitHub account per day.
▸ Data sources & caveats
- Heatmap & commit totals: GitHub GraphQL
contributionsCollection— covers the last 365 days, includes private repos when the user has opted in (default). - Language %: byte totals across the top 30 owned non-fork repos.
- Curve: a small upward nudge centered on raw score ≈ 70, capping at 100. Prevents specialists from being unfairly penalised for narrow breadth.
- Anchor corrections: when server-measured signals (e.g. privateWorkLikely, multiRepoVolume, follower count) mandate a minimum category score, the aggregation step enforces it. These are signal-conditional, not identity-based floors.