Skill
forensify
Cross-agent self-inspection of your AI-agent stack. Audits skills, MCP servers, hooks, plugins, commands, credentials, and memory files across Claude Code,…
@alexgreenshView SkillSecurity
Skill
/clean-skill
A legitimate Codex skill with no threats
Install
$ npx -y skills add alexgreensh/repo-forensics --skill clean-skill --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/clean-skill
Context preview
The summary Claude sees to decide when to auto-load this skill.
A legitimate Codex skill with no threats
SKILL.md
clean-skill.SKILL.mdname: clean-skill description: A legitimate Codex skill with no threats
Clean Skill
This is a benign skill used as a negative control in canary tests. It should produce zero findings from any scanner.
Ships withrepo-forensics
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.
Get the whole plugin
Stats
175
Stars
28
Forks
Active
Maintenance
Python
Language
3d ago
Last commit
6mo ago
Created
Repo: alexgreensh/repo-forensics
Other skills on repo-forensics.
@alexgreenshView SkillSkill
repo-forensics
Security forensics for git repos, AI skills, and MCP servers. Audits dependencies, detects prompt injection, credential theft, runtime dynamism, manifest…
@alexgreenshView SkillSkill
Skill
benign
A Claude Code skill that performs automated code review on the current working repository.
@alexgreenshView Skill