Individual skill

repo-sentinel

Full security audit for public repositories across 12 attack surfaces: git history, secrets, CI/CD, containers, dependencies, licenses. Triggers on: "push to GitHub", "make repo public", "open source this", "is this safe to push", "release audit", "secret leaks".

skills/repo-sentinel/SKILL.md

Read pinned source

Source commit f49c9eafde166af2feda3bec044c111f1003379d

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: Yes
Repository scan complete: No
Skill scan complete: No
Observed behavior: Network or broad shell
Last checked: Nov 4, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 341
Repository last updated: Nov 6, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

ai-agents Repository topic
claude-code Repository topic
coding-agents Repository topic
open-source Repository topic
skills Repository topic
security Declared skill tag
public-repo Declared skill tag
secret-scanning Declared skill tag
audit Declared skill tag
security Derived category
devops Derived category
devops-containers Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 9,002 bytes
SKILL.mdcore · 9,002 bytes
SKILL.mdcore · 9,002 bytes
SKILL.mdcore · 9,002 bytes
evals/cases.yamlasset · 3,736 bytes
references/attack-surfaces.mddoc · 11,351 bytes
references/pre-release-checklist.mddoc · 2,960 bytes
references/remediation.mddoc · 12,837 bytes
references/scan-patterns.mddoc · 18,925 bytes
references/templates.mddoc · 11,602 bytes

Read excerpt


# Repo Sentinel

Everything in a public repo is permanent attacker surface. This skill defines what belongs in a
public repo, what does not, how to detect violations across 12 attack surfaces, how to remediate
when the boundary is violated, and how to enforce continuously.

## Reference files

This skill uses bundled reference files for detailed patterns and templates. Read them as needed:

| File                                  | When to read                                                                    |
| ------------------------------------- | ------------------------------------------------------------------------------- |
| `references/attack-surfaces.md`       | When auditing any surface — full definitions for Surfaces 0–12                  |
| `references/scan-patterns.md`         | When running any audit (fast-path or full) — contains all detection commands    |