Very cool idea, I like the concept and theory quite a bit.

However, after testing a couple themes and looking at the test results of other themes it seems that some updates to the code need to be addressed.

My themes first run through resulted in a very bad score, I host its code on github and therefore it had the .git folder included. While it's good to warn that a hidden file is included with the theme, I am thinking that it would be better if it checked for malicious code within those files.

Also, some of the things that knock down the score aren't related to whether the code is good or the security of the theme, rather these warnings are related to theme author preferences.

I can't wait to see the updates and improvements. This is a very cool idea.