oss-forensics

Analyze open-source supply-chain risk in GitHub repositories with multi-source evidence collection.

Updated Jun 28, 2026
One-click install
npx skills add https://github.com/jleechanorg/hermes-agent --skill oss-forensics-jleechanorg
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: oss-forensics
Source: https://github.com/jleechanorg/hermes-agent/tree/main/optional-skills/security/oss-forensics
Command: npx skills add https://github.com/jleechanorg/hermes-agent --skill oss-forensics-jleechanorg

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Supply chain investigation, evidence recovery, and forensic analysis for GitHub repositories. This skill provides a structured, multi-agent framework to detect deleted content, force-push history rewrites, extract indicators of compromise, and produce formal forensic reports.

Core Features & Use Cases

  • 7-phase multi-agent investigation workflow adapted from RAPTOR for OSS forensics, including evidence collection, hypothesis formation, validation, and reporting.
  • Handles data from local Git, GitHub REST API, Wayback Machine, and GH Archive, with structured evidence management.
  • Generates executive-ready forensic reports with a documented chain of custody and traceable evidence.

Quick Start

Start a new OSS-forensics investigation by creating an investigation workspace for the target repository and following the Phase 0 initialization steps described in SKILL.md.

Frequently Asked Questions about oss-forensics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I investigate a GitHub repository for open-source supply-chain risks?

To investigate open-source supply-chain risks in GitHub repositories, apply a structured framework to coordinate multi-source evidence collection, validate hypotheses, and generate formal forensic reports analyzing recovered deleted content and force-push history rewrites.

Can I recover deleted code and analyze force-push history rewrites in Git?

Yes, you can recover deleted content and analyze force-push history rewrites by applying a multi-agent investigation workflow that extracts indicators of compromise and collects evidence across local git data, GitHub REST API, Wayback Machine, and GH Archive.

What data sources are needed for OSS supply-chain forensics?

OSS supply-chain forensics requires access to local git data, the GitHub REST API, Wayback Machine data, and GH Archive results to feed into evidence management scripts and strict validation guardrails for accurate forensic reporting.

How do I generate a forensic report with a documented chain of custody for GitHub incidents?

You generate executive-ready forensic reports with a documented chain of custody and traceable evidence by completing a 7-phase investigation workflow that adapts the RAPTOR framework for OSS forensics, including evidence collection, hypothesis validation, and reporting.

Does this GitHub forensics workflow require external API access to function?

Yes, GitHub forensics requires access to the GitHub REST API, Wayback Machine data, and GH Archive results, which must be configured during the Phase 0 initialization steps when creating an investigation workspace.

When should I use an automated forensics framework for supply-chain investigation?

Use an automated forensics framework when you need to detect deleted content, force-push history rewrites, and extract indicators of compromise across GitHub repositories, providing structured evidence management and strict validation guardrails for formal reporting.