meoxx009/HACKTOBERFEST--ContriBlens ? reverse-engineered prompt

Build me ContribLens, a web app that lets someone paste in a public GitHub repo and get back a clear security and hygiene scan in plain English.

It should read repositories in a safe, read only way, never run any code, and flag things like risky GitHub Actions setup, exposed secrets, dependency issues, and other common repo problems. For each finding, show the evidence, what it means, and how to fix it, then turn that into a beginner friendly pull request plan with suggested files to change, test steps, acceptance criteria, and a simple skills to learn section with helpful links.

I’d like login, a scan history view, and a way to compare new scans with older ones so users can see what changed. If possible, use the AI explanation flow with a fallback when the main model is unavailable, but keep the app working even without API keys. Make the UI clean and modern, and look up current docs online if you need to.