crashappsec/github-analyzer ? reverse-engineered prompt

Build me a command line tool that checks the security settings of a GitHub organization and points out common risks like missing two factor auth, secret scanning turned off, weak webhook settings, and other org level security gaps.

I want it to take an organization name and a GitHub token, run the checks, then generate a clean report with the results and simple remediation tips. It should also show the summary in a static HTML page on localhost:3000 when the scan is done, and be easy to run locally or with Docker. If you need to look up current GitHub API details or docs while wiring up the checks, go ahead and do that.