Luke Hinds
Community@lukehinds · UK
ex-Distinguished Engineer @RedHatOfficial · Creator of @sigstore · Co-Founder & CEO https://nolabs.ai
Agent Skills by Luke Hinds
Showing 20 vetted skills indexed across 1 GitHub repositories.
lukehindsfork
Fork scanned upstreams into a disclosure org and file draft advisories.
lukehindsposture
Assess GitHub repository readiness for vulnerability reports via security policy checks.
lukehindscna-match
Match GitHub repositories to CVE Numbering Authorities and output report.json.
lukehindsverify
Re-run finding reproductions against repository HEAD and output a verification report.
lukehindssbom
Generates a CycloneDX Software Bill of Materials for a repository as JSON.
lukehindssemgrep
Run Semgrep static analysis and map findings into scrutineer's format.
lukehindsadvisories
Fetch published security advisories for repository packages via the ecosystem advisories API.
lukehindsdependents
Identify top runtime dependents for published packages and generate report.json.
lukehindsdependencies
Catalog dependencies from manifests into a structured JSON report.
lukehindstriage
Classify new repositories and enqueue quality scans via the scrutineer API.
lukehindsmaintainers
Identify repository maintainers and contact channels from commit history, issues, and registry ownership.
lukehindspatch
Generate a minimal in-repo patch for a security finding and output a unified diff.
lukehindsrepo-overview
Inspect a repository root or subpath and output a JSON overview report.
lukehindspackages
Query registry APIs for repository packages and write metrics to report.json.
lukehindsreachability
Trace dependency sinks from app entry points to determine reachability.
lukehindssecurity-deep-dive
Identify and quantify security vulnerabilities in repository code using a six-step per-sink process.
lukehindszizmor
Scan GitHub Actions workflows for security issues and output scrutineer findings JSON.
lukehindssubprojects
Enumerate repository sub-folders and output scannable sub-paths to report.json.
lukehindsmetadata
Fetch repository metadata and write it to report.json.
lukehindsdisclose
Draft GHSA-style advisory disclosures from scrutineer finding data.