skills.rest
vikrant-project
vikrant-projectCOMMUNITY
Explore all skills by this author →
GitHub

oss-forensics

Analyze GitHub repositories for compromised dependencies and recover deleted commits.

2|Updated Jun 8, 2026
Search Tags:#github#security analysis#supply chain#forensics#repository investigation
One-click install
npx skills add https://github.com/vikrant-project/devil-agent-ai-platform --skill oss-forensics-vikrant-project
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oss-forensics
Source: https://github.com/vikrant-project/devil-agent-ai-platform/tree/main/agent_core/optional-skills/security/oss-forensics
Command: npx skills add https://github.com/vikrant-project/devil-agent-ai-platform --skill oss-forensics-vikrant-project

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, gitpython, bq, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill allows for comprehensive investigation and analysis of GitHub repositories, enabling users to uncover potential security breaches and anomalies in the supply chain.

Core Features & Use Cases

  • Supply Chain Investigation: Analyze GitHub repositories for compromised dependencies and malicious code.
  • Deleted Commit Recovery: Retrieve deleted commits from repositories.
  • Forensic Analysis: Generate structured forensic reports detailing findings and evidence.

Quick Start

Run the oss-forensics skill to investigate a repository: 'oss-forensics investigate this repository'.

Frequently Asked Questions about oss-forensics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I recover deleted commits from a GitHub repository?▼

Recover deleted commits from a GitHub repository by running a forensic analysis that utilizes local git analysis, GitHub API, and Wayback Machine data to retrieve lost history and generate detailed forensic reports.

What is GitHub repository forensics for supply chain security?▼

GitHub repository forensics for supply chain security is the process of investigating repositories to uncover compromised dependencies and malicious code, utilizing GitHub Archive data and BigQuery to detect anomalies and security breaches.

Can I use BigQuery and Wayback Machine to investigate compromised dependencies?▼

Yes, you can use BigQuery and Wayback Machine to investigate compromised dependencies by querying GitHub Archive data and web archiving services to analyze repository anomalies and recover historical commit evidence.

What's the best way to investigate a GitHub repository for malicious code?▼

The best way to investigate a GitHub repository for malicious code is conducting a thorough forensic analysis that combines local git analysis with GitHub API checks to identify compromised dependencies and generate structured forensic reports.

Do I need GitHub API and BigQuery access to generate forensic reports?▼

Yes, you need GitHub API and BigQuery access to generate detailed forensic reports, as the analysis requires querying GitHub Archive data, web archiving services, and local git analysis to uncover security breaches.

Related Skills

ldzhhxxldzhhxx
1

oss-forensics

Performs forensic analysis of container images and discovers CVEs and hidden content.

Community
Advanced
jassicsjassics
6

forensic-triage

Automate forensic triage by collecting disk, memory, and log evidence to build an incident timeline.

Community
Advanced
ArianHobson333ArianHobson333
7

source-code-scanning

Automate source code security scanning for vulnerabilities, CVEs, and hardcoded secrets.

Community
Advanced
davpatel605-beepdavpatel605-beep

oss-forensics

Recover deleted commits and analyze GitHub security anomalies for supply chain investigations.

Community
Advanced