skills.rest
THTProtocol
THTProtocolCOMMUNITY
Explore all skills by this author →
GitHub

oss-forensics

Automate open-source supply chain attack investigations with structured forensic reports.

Updated Aug 23, 2026
Search Tags:#hypothesis validation#forensic analysis#supply chain investigation#deleted data recovery#open-source security
One-click install
npx skills add https://github.com/THTProtocol/lastochka --skill oss-forensics-thtprotocol
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oss-forensics
Source: https://github.com/THTProtocol/lastochka/tree/main/optional-skills/security/oss-forensics
Command: npx skills add https://github.com/THTProtocol/lastochka --skill oss-forensics-thtprotocol

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill enables comprehensive investigations of open-source supply chain attacks, providing the tools to recover deleted data, validate hypotheses, and generate structured forensic reports.

Core Features & Use Cases

  • Supply Chain Investigation: A multi-agent framework for investigating open-source supply chain attacks.
  • Deleted Data Recovery: Reconstructs deleted commits, PRs, issues, and repository content from various sources.
  • Hypothesis Validation: Automates the validation of hypotheses against evidence, ensuring accuracy.
  • Forensic Reporting: Generates detailed, structured reports for evidence, hypotheses, and findings.
  • Use Case: When a repository is suspected of a supply chain attack, use this Skill to conduct a thorough investigation, recover deleted information, and validate the hypothesis.

Quick Start

To investigate a repository, run the following command: lastochka run security/oss-forensics investigate RepositoryName

Frequently Asked Questions about oss-forensics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I investigate open-source supply chain attacks?▼

To investigate open-source supply chain attacks, use an automated framework to collect data from GitHub API, GH Archive, local git, and Wayback Machine, generating structured forensic reports with verifiable evidence and timeline analysis.

Can I recover deleted commits and PRs from a repository?▼

Yes, you can recover deleted commits, PRs, issues, and repository content by reconstructing them from public sources like the Wayback Machine and GH Archive during a forensic analysis.

What is hypothesis validation in forensic analysis?▼

Hypothesis validation in forensic analysis is the structured process of automating suspected supply chain attack scenarios against collected evidence to ensure accuracy and generate reliable findings.

How do I generate a structured forensic report for evidence and findings?▼

You generate a structured forensic report by collecting parallel data from local git and public sources, validating hypotheses against evidence, and outputting a detailed timeline analysis with verifiable findings.

Does this supply chain investigation tool work with local git repositories?▼

Yes, the supply chain investigation tool performs parallel data collection directly from local git repositories alongside GitHub API and GH Archive to automate forensic analysis.

Related Skills

Explore More Software Engineering Skills→
Quill-AgentQuill-Agent
3

oss-forensics

Investigate GitHub repositories for deleted commits, force-pushes, and indicators of compromise.

Community
Advanced
jassicsjassics
6

forensic-triage

Automate forensic triage by collecting disk, memory, and log evidence to build an incident timeline.

Community
Advanced
Serg28Serg28

security-reviewer

Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.

Community
Intermediate
timmo001timmo001
5

diagnose

Guide debugging of software bugs, regressions, and performance issues.

Community
Advanced