screening-github-cloud

Name: screening-github-cloud
Availability: InStock
Author: gradigit

Screens GitHub repositories in sandbox environments and generates a Markdown report.

Updated Jan 28, 2026

Search Tags:#security #GitHub #screening #supply-chain #sandbox #dynamic-analysis #malware-detection

Ready to run

npx skills add https://github.com/gradigit/screening-github-cloud --skill screening-github-cloud

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: screening-github-cloud
Source: https://github.com/gradigit/screening-github-cloud/tree/main
Command: npx skills add https://github.com/gradigit/screening-github-cloud --skill screening-github-cloud

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables automated, safe pre-clone screening of GitHub repositories inside disposable sandbox environments to protect development workflows from malware, secrets exposure, and supply-chain risks.

Core Features & Use Cases

Static and dynamic analysis of target repositories.
Dependency checks, secret scanning, and workflow validation across public and private repos.
Generates a sharable screening report and saves it to the Codespace or local sandbox for audit.

Quick Start

Create a Codespace, SSH in, install Claude Code CLI, clone the screening skill, login to Claude, run screening, and review reports.

Frequently Asked Questions about screening-github-cloud

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I screen a GitHub repository for malware before cloning?▼

Pre-clone repository screening runs static and dynamic analysis inside disposable sandbox environments to detect malware, secrets, and supply-chain risks before you clone the code.

Can I run GitHub security screening in a local Docker sandbox?▼

Yes, GitHub security screening supports both cloud Codespaces and local Docker or OrbStack sandboxes as disposable environments for safely analyzing target repositories.

What tools are used for GitHub workflow validation and secret scanning?▼

GitHub workflow validation and secret scanning utilize Trivy, Gitleaks, actionlint, and zizmor to perform dependency checks and detect exposed secrets in target repositories.

How do I generate a security screening report for a private GitHub repo?▼

Automated security screening generates a standardized SCREENING-REPORT.md file saved directly to your Codespace or local sandbox, providing an auditable record for both public and private targets.

Does pre-clone screening prevent supply-chain attacks from public repositories?▼

Pre-clone screening mitigates supply-chain risks by applying static and dynamic analysis to GitHub repositories within an isolated sandbox, preventing malicious code from reaching your local development workflow.

What are the limitations of sandboxed dynamic analysis for GitHub repos?▼

Sandboxed dynamic analysis requires a disposable environment like Codespaces or Docker to execute safely, and generates a standardized report rather than automatically patching detected vulnerabilities or removing malware.