skills.rest
Chris-Chai-Minjae
Chris-Chai-MinjaeCOMMUNITY
Explore all skills by this author →
GitHub

oss-forensics

Coordinate multi-source evidence collection to identify supply-chain attacks in open-source repositories.

Updated Apr 23, 2026
Search Tags:#investigation#github#evidence#supply-chain#forensics#oss-forensics
One-click install
npx skills add https://github.com/Chris-Chai-Minjae/hermes-agent-r1-bridge --skill oss-forensics-chris-chai-minjae
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oss-forensics
Source: https://github.com/Chris-Chai-Minjae/hermes-agent-r1-bridge/tree/main/optional-skills/security/oss-forensics
Command: npx skills add https://github.com/Chris-Chai-Minjae/hermes-agent-r1-bridge --skill oss-forensics-chris-chai-minjae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

The OSS-forensics skill provides a structured framework to investigate supply-chain attacks in open-source software by collecting and correlating multi-source evidence.

Core Features & Use Cases

  • 7-phase investigator framework for end-to-end forensics (initialization, IOC extraction, evidence collection, hypothesis formation, validation, reporting, completion)
  • Cross-source verification using local git data, GitHub API, Wayback Machine, and GitHub Archive
  • Generates auditable forensic reports with chain-of-custody and evidence registry.

Quick Start

Run the seven-phase OSS forensic workflow to detect supply-chain compromises and generate a report.

Frequently Asked Questions about oss-forensics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does cross-source verification work for supply-chain forensics?▼

Cross-source verification for supply-chain forensics works by correlating evidence from local git data, GitHub REST API, Wayback Machine archives, and GitHub Archive to test and validate attack hypotheses.

What is the best way to collect evidence from the Wayback Machine and GitHub Archive for an OSS compromise?▼

Yes, you can generate a formal forensic report with an auditable chain of custody and evidence registry by completing the structured investigation workflow provided by this skill.

Do I need any dependencies to perform OSS forensics investigations?▼

The best way to collect evidence is using a structured forensic workflow that queries GitHub Archive via BigQuery and Wayback Machine archives, integrating them with local git data for cross-source validation.

Do I need any dependencies to perform OSS forensics investigations?▼

No external dependencies are required to perform OSS forensics investigations, as the skill operates independently using its internal scripts and references to coordinate multi-source evidence collection.

Related Skills

Explore More Data & Analytics Skills→
DaddyElonMusk69DaddyElonMusk69

oss-forensics

Investigate GitHub repositories for supply-chain compromise and recover deleted commits.

Community
Advanced
jassicsjassics
6

forensic-triage

Automate forensic triage by collecting disk, memory, and log evidence to build an incident timeline.

Community
Advanced
gadievrongadievron
3.5k

oss-forensics/orchestration

Orchestrate OSS forensic investigations across public GitHub repositories with phase-driven workflows.

Community
Advanced
kjayleekjaylee

game-dev-rust-godot

Develop HTML5 games with Rust WASM or Godot 4.x using asset-first TDD workflows.

Community
Advanced