repo-scan SKILL.md skillB
repo-scan from kerberosclaw/kc_ai_skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kerberosclaw/kc_ai_skills/repo-scan@v1.1.0Pins v1.1.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kerberosclaw/kc_ai_skills
- Path
repo-scan/SKILL.md- Versions recorded
- 4
- Latest version
- v1.1.0, committed Jul 30, 2026
- First version recorded
- Mar 24, 2026
- Size
- 9,547 bytes
- Repository stars
- 79
- License
- MIT
Use when the user wants to evaluate a GitHub repository before installing, running, forking, or depending on it. Takes a GitHub repo URL, cleans tracking params, shallow-clones to /tmp, inspects dependency/supply-chain risk, static vulnerability patterns, issue-reported security problems, maintainer health, and produces a risk summary. NOT for reviewing the user's own PR diff or for running untrusted code.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Repo Scan — GitHub 開源專案安全掃描
You are a supply-chain security reviewer for open-source GitHub repositories. Your job is to help the user decide whether a repo is safe enough to install or depend on without executing its code.
## 使用方式
```
/repo-scan https://github.com/owner/repo
```
參數：
- **GitHub repo URL**（必要）— 支援含 query string 的 URL（自動清除 `?fbclid=` 等追蹤參數）
---
## 執行規則
1. **GitHub repo URL** 為必要參數。如果使用者沒有提供，直接詢問，不要猜測。
2. URL 清理：移除 `?fbclid=`、`?ref=` 等追蹤參數，保留 `https://github.com/owner/repo` 格式。
3. 前置檢查通過後才開始掃描流程。
4. 掃描完成後清理：刪除 clone 到 `/tmp/` 的 repo。
## 不適用
- 不執行 clone 下來的專案、不跑 install scripts、不啟動服務。
- 不取代 PR security review；這是安裝前第三方 repo 風險評估。
- 不把 star 數或 README 宣稱當作安全證據。
---
## 前置檢查
掃描前依序確認：
```bash
# 1. git 是否可用
git --version
# 2. gh 是否可用且已登入
gh auth status
```
- `git` 不可用 → 停止，提示安裝
- `gh` 不可用或未登入 → 警告，跳過 Phase 5（Issues 掃描），其餘照跑
---
## 掃描流程
### Phase 1：專案概覽
Clone repo 到 `/tmp/repo-scan-{repo_name}`（shallow clone 節省時間）：
```bash
git clone --depth 50 {repo_url} /tmp/repo-scan-{repo_name}
```
分析並整理：
| 項目 | 內容 |
|------|------|
| 專案名稱 | |
| 用途說明 | 一句話描述這個專案做什麼 |
| 主要語言 | |
| 關鍵檔案 | 列出核心檔案及其功能 |
| 執行方式 | 如何安裝/使用（從 README 或程式碼判斷）|
| Stars / Forks | |
…Read the whole file at its exact version.
How to install
mdr add kerberosclaw/kc_ai_skills/repo-scan@sha256:4c41f837c64846a7The line at the top of this page pins the label v1.1.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_qiuxgg6quehju2ba)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Mar 24, 2026 and Jul 30, 2026, about one every 43 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.1.0 latest | 2026-07-30 | d4fda1a | 9,547 B | B | view · diff |
| v1.0.1 | 2026-07-15 | 38420bb | 8,872 B | B | view · diff |
| v1.0.0 | 2026-07-14 | a933fb9 | 8,226 B | B | view · diff |
| v1.0.0 | 2026-03-24 | 12e2b3a | 8,143 B | B | view |
Audit of the latest version
- fail: No curl or wget piped into a shell (matched: curl | bash)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9547 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
kerberosclaw/kc_ai_skills · 79 stars · license MIT · pushed 2026-10-16 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_qiuxgg6quehju2ba GET https://markdownregistry.com/api/v1/resolve?ref=kerberosclaw/kc_ai_skills/repo-scan GET https://markdownregistry.com/api/v1/blob/4c41f837c64846a77619ba54201b3a62a2467bbd1070ba66f687aa027acafcc2
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from kerberosclaw/kc_ai_skills
Every file in kerberosclaw/kc_ai_skills