Investigate PhantomStars Fake Engagement Alert

Issue: Investigate PhantomStars Fake Engagement Alert

Summary

The repository has been flagged by PhantomStars for a potential fake GitHub engagement campaign. The report indicates that a number of recently created accounts may have artificially starred or forked the repository, which could negatively impact repository credibility and analytics.

Repository

x1xhlol/system-prompts-and-models-of-ai-tools

Detection Details

Initial Scan (2026-06-11)

• Engagers scanned: 292
• Likely fake accounts: 7 (2.4%)
• Suspicious accounts: 40
• Previously seen likely fake: 1
• Campaigns detected: 1
• Campaign ID: c-89cbca28

Scan Update (2026-06-12)

• Engagers scanned: 287
• Likely fake accounts: 6 (2.1%)
• Suspicious accounts: 57
• Previously seen likely fake: 2
• Campaigns detected: 1
• Campaign ID: c-bfff0437

Scan Update (2026-06-14)

• Engagers scanned: 268
• Likely fake accounts: 19 (7.1%)
• Suspicious accounts: 64
• Campaigns detected: 1
• Campaign ID: c-a925a4fd

Problem

The repository appears to be receiving engagement from multiple newly created or low-trust GitHub accounts. Although the report is probabilistic and does not confirm abuse, the increasing number of flagged accounts across multiple scans suggests a possible coordinated star/fork campaign.

Potential impacts include:

• Inflated repository stars/forks
• Misleading popularity metrics
• Reduced trust from contributors
• Potential GitHub investigation if engagement is determined to be artificial

Expected Behavior

• Repository stars and forks should come from genuine GitHub users.
• Engagement metrics should accurately reflect organic community interest.
• No coordinated or automated engagement campaigns should be associated with the repository.

Current Behavior

• PhantomStars has repeatedly detected suspicious engagement across multiple days.
• The percentage of likely fake accounts increased from 2.4% to 7.1%.
• Multiple engagement campaigns were identified with different campaign IDs.
• Several accounts were classified as likely_fake or suspicious based on account age and engagement patterns.

Suggested Actions

• Review recent stars and forks for unusual activity.
• Check repository traffic and referrer analytics.
• Avoid purchasing or promoting artificial engagement.
• Report false positives if legitimate users are incorrectly flagged.
• Continue monitoring future scans for recurring campaigns.
• Consider reporting suspicious activity to GitHub if evidence of coordinated abuse is found.

Notes

• This report is based on heuristic analysis and should not be treated as definitive proof of malicious activity.
• Individual accounts listed by PhantomStars should not be publicly accused without additional verification.
• Further investigation is recommended before taking administrative action.

References

• PhantomStars scan reports dated:
  • 2026-06-11
  • 2026-06-12
  • 2026-06-14