Can you make it so your site uses HTTPS?
Can you make it so it doesn't just load an frame pointing to Github.io?
Both combined seem very sketchy to me.