Investigate GitHub supply chain attacks and generate forensic reports.
npx skills add https://github.com/Signmanal/VIGIL --skill oss-forensics-signmanal
Please help me install this Agent Skill. Skill: oss-forensics Source: https://github.com/Signmanal/VIGIL/tree/main/optional-skills/security/oss-forensics Command: npx skills add https://github.com/Signmanal/VIGIL --skill oss-forensics-signmanal
This Skill solves the complex, time-sensitive problem of investigating suspected open source software supply chain attacks, where critical evidence may be deleted, hidden via force-pushes, or scattered across multiple archival and API sources.
Use the oss-forensics skill to investigate the repository owner/repo for signs of supply chain compromise, recover any deleted commit evidence, and generate a full forensic report with validated findings.
High-intent search queries and answers about installing and using this skill.
Recover force-pushed commits by pulling data from local git repositories, the GitHub REST API, Wayback Machine archives, and GitHub Archive BigQuery to reconstruct deleted repository changes and validate supply chain attack hypotheses.
Open source supply chain forensics works by orchestrating specialized sub-agents to collect, cross-reference, and validate evidence without mixing data sources, ensuring investigation integrity for malicious dependency injection analysis.
The best way to extract indicators of compromise is through a multi-source investigation framework that cross-references local git data, GitHub APIs, and archive sources to detect maintainer account compromise and generate validated IOC lists.
Yes, you can reconstruct deleted issues and pull requests by querying the GitHub REST API and GitHub Archive BigQuery, generating structured forensic reports with chain of custody tracking for coordinated vulnerability disclosure.
Yes, open source supply chain forensics supports evidence-backed hypothesis validation by cross-referencing multi-source data from the Wayback Machine, GitHub Archive BigQuery, and local git repositories to ensure validated findings.
Use a multi-phase forensic investigation framework when you suspect a critical open source library was compromised via a malicious maintainer commit, requiring evidence recovery, attack hypothesis validation, and structured reporting for coordinated disclosure.
thisismynewfmail-uiCoordinate multi-source OSS forensics investigations to document supply-chain risks in GitHub repositories.
ecosyste-msRetrieve package metadata, versions, dependencies, and maintainers from registries.
afel6Investigates GitHub repositories for supply-chain compromise and recovers deleted commits.
mejangoDetect 11 known vulnerability patterns in Algorand TEAL and PyTeal source files.
