backnotprop/oss-security-audit

backnotprop のプロフィール

記録された最新のソース活動: 2026年4月9日 06:47

SkillsMP カタログ更新: 2026年10月17日 00:09

収集済み skills: 1

GitHub スター: 17
GitHub フォーク: 1

リポジトリの README

README の元ファイル：README.md

README の元ファイルを読む

README 全文を表示

# oss-security-audit An agent skill that audits an open-source repository's supply chain security posture and produces an HTML report. Methodology is based on [Astral's OSS security framework](https://astral.sh/blog/open-source-security-at-astral) (April 2026), covering: 1. CI/CD workflow security (triggers, action pinning, permissions, secret isolation) 2. Repository and organizational controls (branch/tag rulesets, 2FA, admin bypass) 3. Release security (Trusted Publishing, deployment environments, approvals, attestations, immutable releases) 4. Automations (GitHub Apps vs Actions for privileged triggers) 5. Dependency hygiene (automated updates, cooldowns, vuln surfacing, footprint) Works against GitHub or GitLab. Read-only. The skill runs a preflight access check and asks the user to grant anything it's missing. ## Install _Claude Code_ ``` git clone https://github.com/backnotprop/oss-security-audit ~/.claude/skills/oss-security-audit ``` _Codex_ ``` git clone https://github.com/backnotprop/oss-security-audit ~/.codex/skills/oss-security-audit ``` _Agents_ ``` git clone https://github.com/backnotprop/oss-security-audit ~/.agents/skills/oss-security-audit ``` ## Use In an agent session, from inside the repo you want to audit: > `/oss-security-audit` The skill triggers, walks through the five domains, and writes `oss-security-audit-report.html` to the repo root. ## Layout ``` SKILL.md # methodology + workflow assets/report-template.html # self-contained HTML report template ``` No bundled scanner. The audit is LLM-driven end to end.

リポジトリの README を読み込んでいます…

このリポジトリの skills

情報セキュリティアナリスト

1 件の職業カテゴリ · 100% 分類済み

skill

職業分類

説明

更新

oss-security-audit

情報セキュリティアナリスト

Audits the CI/CD pipeline, repository, release process, automations, and dependency hygiene of an open-source software supply chain, then produces an elegant HTML report of findings and recommendations. Use this skill whenever the user asks to assess, audit,…

原文の言語: 英語

2026-04-09

収集済み skill 1 件中 1 件を表示しています。

AI アシスタントでインストール

このプロンプトをコピーして、使用中の AI アシスタントに送ってください。

Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/backnotprop/oss-security-audit.