thomast1906/skill-spector-githubaction

thomast1906-Profil

Letzte erfasste Quellaktivität: 24. Juni 2026 um 12:21

SkillsMP-Katalog aktualisiert: 5. November 2026 um 19:57

gesammelte Skills: 1

GitHub-Stars: 1
GitHub-Forks: 0

Mit einem KI-Assistenten installieren

Diesen Prompt kopieren und in den verwendeten KI-Assistenten einfügen.

Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/thomast1906/skill-spector-githubaction.

README des Repositorys

README-Quelldatei: README.md

README-Quelldatei lesen

Vollständige README anzeigen

# skill-spector-githubaction-private GitHub Actions workflow to run [NVIDIA SkillSpector](https://github.com/NVIDIA/SkillSpector) — a security scanner for AI agent skills. ## Setup 1. Add your OpenAI API key as a repository secret named **`OPENAI_API_KEY`** - Go to **Settings → Secrets and variables → Actions → New repository secret** 2. Enable **GitHub Code Scanning** (Settings → Security → Code scanning) to view SARIF results in the Security tab. ## Usage The workflow runs automatically on: - Push / PR to `main` - Every Monday at 06:00 UTC Or trigger it manually via **Actions → SkillSpector Security Scan → Run workflow**, where you can optionally supply a custom target (git URL, zip, or file path) and toggle LLM analysis. ## Outputs | Artifact | Description | |---|---| | `skillspector-results.sarif` | Uploaded to GitHub Code Scanning | | `skillspector-report.md` | Markdown report attached to the workflow run | | Job Summary | Markdown report printed inline in the Actions UI | ## LLM analysis When `OPENAI_API_KEY` is set, SkillSpector performs a two-stage scan: 1. Fast static analysis (68 patterns across 17 categories) 2. LLM semantic evaluation via OpenAI (`gpt-5.4` default) Omit the secret or select `use_llm: false` in the manual trigger to run static-only.

README des Repositorys wird geladen…

Skills in diesem Repository

Softwareentwickler

1 Berufskategorien · 100% klassifiziert

Skill

Beruf

Beschreibung

Aktualisiert

excalidraw-diagramming

Softwareentwickler

Create and edit diagrams on a live Excalidraw canvas using the Excalidraw MCP server. Use when asked to draw, diagram, sketch, or visualise architectures, workflows, data flows, system designs, flowcharts, mind maps, or sequence diagrams. Trigger phrases…

Quellsprache: Englisch

2026-06-24

Es werden 1 von 1 gesammelten Skills angezeigt.