Classify new repositories and enqueue quality scans via the scrutineer API.
npx skills add https://github.com/lukehinds/scrutineer-attest-test --skill triage-lukehinds
Please help me install this Agent Skill. Skill: triage Source: https://github.com/lukehinds/scrutineer-attest-test/tree/main/skills/triage Command: npx skills add https://github.com/lukehinds/scrutineer-attest-test --skill triage-lukehinds
Automatically kick off the standard set of quality scans when a repository is added, and produce a concise summary of what was enqueued to guide follow-on checks and tuning.
Start by adding a repository to trigger the default triage workflow and review the generated report.
High-intent search queries and answers about installing and using this skill.
Automating repository triage runs a brief scan to detect languages and package managers, then enqueues the appropriate quality scans automatically. It classifies the newly added repository and writes a concise summary of the enqueued work to report.json.
Repository triage evaluates a new codebase by running a brief check to determine code and package presence. Based on the detected languages and package managers, it decides which specific scans to enqueue via the scrutineer API for that commit.
The triage process prevents duplicate automated scans by checking the scrutineer API status before enqueuing. It explicitly skips services that are already running or completed for the current commit, ensuring only necessary scans are dispatched.
You can adjust default scan coverage by editing the scan list directly in SKILL.md. This allows you to tune which scans are enqueued for newly added repositories without needing to touch or modify the core implementation code.
Automating scans for a fresh repository generates a minimal report structure written to report.json. This concise file summarizes all the triage work that was enqueued, guiding any necessary follow-on checks or configuration tuning.
y1feng200156Performs OWASP Dependency-Check scans to detect CVE vulnerabilities in project dependencies.
diego-tobalinaAutomates code review by analyzing git commits for quality and security issues.
roderikScan codebases with YAML rules to detect security vulnerabilities and quality issues.
jonathanmalkinPresent the afternoon scan report or offer to generate one.
