skills.rest
LynxLabVN
LynxLabVNOFFICIAL
Explore all skills by this author →
GitHub

oss-forensics

Investigate GitHub repositories for supply chain attacks using git and API analysis.

Updated Jul 3, 2026
Search Tags:#security#github#repository analysis#forensics#supply chain security
One-click install
npx skills add https://github.com/LynxLabVN/office-agent --skill oss-forensics-lynxlabvn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oss-forensics
Source: https://github.com/LynxLabVN/office-agent/tree/main/agent-core/optional-skills/security/oss-forensics
Command: npx skills add https://github.com/LynxLabVN/office-agent --skill oss-forensics-lynxlabvn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires git, python, requests, bigquery, pyyaml, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for investigating GitHub repositories, uncovering potential security breaches, and responding to supply chain attacks.

Core Features & Use Cases

  • Supply Chain Attack Investigation: Investigate potential breaches and analyze deleted commits, force-pushes, and compromised dependencies.
  • Evidence Collection: Collect and verify evidence from local git repositories, GitHub API, GitHub Archive, and Wayback Machine.
  • Hypothesis Formation & Validation: Formulate and validate hypotheses using a structured approach, ensuring evidence is cross-referenced and logically consistent.
  • Structured Reporting: Generate detailed forensic reports with evidence registry, Indicators of Compromise, and recommendations.
  • Use Case: When a suspicious commit is found in a repository, use this Skill to perform a thorough investigation, collect evidence, and validate or refute the hypothesis.

Quick Start

Use the oss-forensics skill to investigate the repository 'OWNER/REPO'.

Frequently Asked Questions about oss-forensics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I investigate a GitHub repository for supply chain attacks?▼

Investigate GitHub supply chain attacks by performing multi-phase repository forensics using local git analysis, GitHub API, GitHub Archive, and Wayback Machine to uncover deleted commits, force-pushes, and compromised dependencies.

How can I find deleted commits or force-pushes in a compromised repository?▼

Find deleted commits and force-pushes by collecting and verifying evidence from local git repositories, GitHub API, GitHub Archive, and Wayback Machine during a structured forensic investigation.

What is GitHub repository forensics and when do I need it?▼

GitHub repository forensics is a structured investigation to detect and analyze security breaches. You need it when a suspicious commit is found, requiring evidence collection and hypothesis validation to confirm potential supply chain attacks.

Do I need Python and git installed to analyze repository security breaches?▼

Yes, you need Python and git installed to analyze repository security breaches. This forensic investigation requires multiple external tools and libraries, including requests, bigquery, and pyyaml, for comprehensive data collection.

How do I generate forensic reports for compromised dependencies?▼

Generate forensic reports for compromised dependencies by formulating and validating hypotheses using a structured approach, ensuring evidence is cross-referenced to produce detailed reports with evidence registry and Indicators of Compromise.

Related Skills

Explore More Software Engineering Skills→
pattern-stackpattern-stack
1

create-worktree-skill

Create isolated Git worktrees with auto-incremented ports and environment files.

Official
Intermediate
jaskaranhundaljaskaranhundal
3

forensics

Reconstruct digital forensics timelines and extract Indicators of Compromise.

Community
Advanced
liumeixinliumeixin
4

oss-forensics

Analyze GitHub repositories for supply chain attack indicators via API and git analysis.

Community
Advanced
yunaameliayunaamelia

vulnerability-scanner

Scan codebases for security vulnerabilities and prioritize risks using OWASP guidelines.

Community
Advanced