oss-forensics

Recover deleted commits and detect supply chain attacks in GitHub repositories.

1|Updated Feb 17, 2026
One-click install
npx skills add https://github.com/brittaniebuffiecsu/zerogravityclaw --skill oss-forensics-brittaniebuffiecsu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: oss-forensics
Source: https://github.com/brittaniebuffiecsu/zerogravityclaw/tree/main/src/hermes-core/optional-skills/security/oss-forensics
Command: npx skills add https://github.com/brittaniebuffiecsu/zerogravityclaw --skill oss-forensics-brittaniebuffiecsu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides advanced forensic analysis for GitHub repositories, enabling the recovery of deleted commits and the detection of supply chain compromises.

Core Features & Use Cases

  • Deleted Commit Recovery: Retrieve deleted commits and their associated metadata.
  • Supply Chain Attack Detection: Identify signs of malicious activity in the repository's supply chain.
  • Forensic Reporting: Generate detailed reports on the investigation findings.

Quick Start

Run the oss-forensics skill to investigate a GitHub repository for signs of compromise.

Frequently Asked Questions about oss-forensics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I recover deleted commits in a GitHub repository?

To recover deleted commits in a GitHub repository, perform forensic analysis using the GitHub API and local git analysis. This retrieves deleted commits and their associated metadata to restore lost development history.

How do I detect supply chain attacks on GitHub?

Detect supply chain attacks on GitHub by performing forensic analysis to identify signs of malicious activity. The process examines repository history and metadata to pinpoint potential indicators of compromise.

What data sources are needed for GitHub repository forensics?

GitHub repository forensics requires access to the target repository, relevant security tools, the GitHub API, and GH Archive data. These sources provide the necessary commit history and event logs for investigation.

Can I generate an indicators of compromise report for a compromised git repository?

Yes, you can generate an indicators of compromise report for a compromised git repository by running forensic analysis. The output includes a detailed report outlining investigation findings and detected malicious activity.

What is the best way to investigate a GitHub repository for signs of compromise?

The best way to investigate a GitHub repository for signs of compromise is to run a dedicated forensic analysis skill. It combines GH Archive data, GitHub API queries, and local git analysis to detect supply chain compromises.