skills.rest
superfhp
superfhpCOMMUNITY
Explore all skills by this author →
GitHub

oss-forensics

Investigate GitHub repositories for supply chain attacks and compromised code.

Updated May 8, 2026
Search Tags:#GitHub#supply chain#forensics#data recovery#repository security
One-click install
npx skills add https://github.com/superfhp/lumi-agent --skill oss-forensics-superfhp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oss-forensics
Source: https://github.com/superfhp/lumi-agent/tree/main/optional-skills/security/oss-forensics
Command: npx skills add https://github.com/superfhp/lumi-agent --skill oss-forensics-superfhp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, requests_cache, pytz, github, backoff, pyyaml, click, tabulate, termcolor, tqdm, rich, jsondiff, python-dateutil, aiohttp, aiofiles, aiohttp_session, aiohttp_jinja2, aiohttp_jsonapi, python-multipart, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill performs in-depth forensic analysis on GitHub repositories to investigate supply chain attacks, recover deleted data, and detect compromised code.

Core Features & Use Cases

  • Deleted Commit Recovery: Undo deletions and analyze the history of a repository.
  • Force-Push Detection: Identify and analyze force-pushed commits to uncover data manipulation.
  • IOC Extraction: Extract Indicators of Compromise from various data sources.
  • Multi-Source Evidence Collection: Gather information from GitHub, the web, and local git repositories.
  • Hypothesis Formation and Validation: Build and verify hypotheses based on collected evidence.
  • Structured Reporting: Generate comprehensive forensic reports.

Quick Start

To investigate a GitHub repository, use the oss-forensics skill with the command: oss-forensics investigate [owner/repo].

Frequently Asked Questions about oss-forensics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I investigate a GitHub repository for supply chain attacks?▼

You investigate GitHub repository supply chain attacks by running multi-source evidence collection, hypothesis formation, and structured reporting to detect compromised code and data manipulation.

Can I recover deleted commits from a GitHub repository?▼

Yes, you can recover deleted commits by analyzing the repository's history to undo deletions and investigate data manipulation or force-pushed commits.

How do I extract Indicators of Compromise from compromised code?▼

Extract Indicators of Compromise by gathering information from multiple sources including GitHub, the Wayback Machine, and local git repositories to identify compromised code.

Does oss-forensics work with the Wayback Machine for data recovery?▼

Yes, oss-forensics performs multi-source evidence collection using the Wayback Machine alongside the GitHub API and local git repositories to recover deleted data.

What is the best way to detect force-pushed commits in GitHub?▼

The best way to detect force-pushed commits is by performing forensic analysis on the repository history to identify and analyze data manipulation and uncover compromised code.

Do I need the GitHub API to generate structured forensic reports?▼

Yes, generating structured forensic reports requires the GitHub API, along with external dependencies, to gather evidence and validate hypotheses about repository security.

Related Skills

NITISH-gitbitNITISH-gitbit

oss-forensics

Collect and analyze evidence from GitHub repositories for supply chain attack investigations.

Community
Advanced
trungdo9trungdo9
3

cti-expert

Automate cyber threat intelligence investigations using OSINT and forensic analysis.

Community
Advanced
1thirteeng31thirteeng3

oss-forensics

Investigate OSS supply chain compromises using Git history, GitHub API, and archives.

Community
Advanced
InverterNetworkInverterNetwork

oss-forensics

Coordinate multi-source evidence collection to detect supply chain attacks in GitHub repositories.

Official
Advanced