repos

Fetch repository metadata and generate SBOMs from GitHub, GitLab, Bitbucket, and Codeberg.

1|Updated May 5, 2026

Search Tags:#repository #metadata #SBOM #dependency #forge

One-click install

npx skills add https://github.com/ecosyste-ms/skills --skill repos-ecosyste-ms

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: repos
Source: https://github.com/ecosyste-ms/skills/tree/main/skills/repos
Command: npx skills add https://github.com/ecosyste-ms/skills --skill repos-ecosyste-ms

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill solves the problem of quickly finding repository metadata and dependencies across various forges, such as GitHub, GitLab, Bitbucket, and many others.

Core Features & Use Cases

Repository Lookup: Retrieve metadata for a repository by URL or package URL.
Repository Tags and Releases: Access tags, releases, and manifests for a repository.
Dependency Analysis: Identify which repositories depend on a specific package.
SBOM Generation: Generate a Software Bill of Materials (SBOM) for a repository.
Use Case: Find all repositories that depend on the 'left-pad' package or retrieve metadata for the 'rails/rails' repository.

Quick Start

Use the repos skill to find metadata for the repository 'rails/rails' on GitHub.

Frequently Asked Questions about repos

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I get repository metadata across different forges like GitHub and GitLab?▼

To get repository metadata across different forges, you can retrieve details by providing a repository URL or package URL. This process works with GitHub, GitLab, Bitbucket, and Codeberg to fetch tags, releases, and manifests.

What is an SBOM and how do I generate one for a repository?▼

An SBOM is a Software Bill of Materials listing package dependencies. You can generate an SBOM for a repository by fetching its dependency information and manifests via API calls to identify included packages.

Do I need curl installed to fetch repository dependencies?▼

Yes, you need curl installed to fetch repository dependencies. The system requires curl to execute the API calls necessary for retrieving metadata and generating SBOMs from the various forges.

Can I find all repositories that depend on a specific package?▼

You can find all repositories that depend on a specific package through dependency analysis. By querying a package URL, the system identifies which repositories rely on that specific package.

What's the best way to retrieve tags and releases for a Bitbucket repository?▼

The best way to retrieve tags and releases for a Bitbucket repository is to use the repository lookup feature. By inputting the repository URL, the system accesses available tags, releases, and manifests.