repo-security-posture
Find security gaps in your GitHub repository.
What it does
Audits a GitHub repository's security configuration and CI/CD to produce a ranked, evidence-based list of hardening tasks.
When to use it
Use when reviewing or hardening a repository, assessing GitHub configuration, or checking CI/CD and supply-chain security.
How to use it
Give it a GitHub repository name or URL; it returns a categorized security hardening worklist ranked by severity.
What you provide
- a GitHub repository name or URL
Uses
What you need · 2
The main evidence-collection workflow runs with Python 3 and uses only the standard library, without pip installs.
Reads an optional GitHub token from GITHUB_TOKEN, or alternatively GH_TOKEN, to inspect settings requiring admin or push access; public content can be collected without it.
Access · 2
This skill
GitHub
Reads GitHub repository security evidence
/tmp/audit.json
Saves a temporary audit inventory