OpenAgentSkill Registry Manifest
Skill: Provenance Action
Slug: danielroe-provenance-action
Category: github-automation
Description: Fail CI when dependencies in your lockfile lose npm provenance or trusted publisher status

Agent fit:
- Decision: 81/100 Strong shortlist
- Primary fit: GitHub automation
- Role: Companion skill

Supply profile:
- Track: Coding and developer agents
- Scenario: GitHub automation
- Applicable agents: Claude Code, CLI, Codex, Cursor, TypeScript
- Maintenance: 15d since push
- Risk: Safe to try

Trust:
- Trust score: 81/100 Strong shortlist
- Audit: 86/100 Safe to try

Attribution:
- Status: Community indexed
- Source: GitHub star discovery
- Creator: danielroe
- Claim URL: https://www.openagentskill.com/skills/danielroe-provenance-action#claim-this-skill

Install:
npx skills add danielroe/provenance-action

URLs:
- Web: https://www.openagentskill.com/skills/danielroe-provenance-action
- API: https://www.openagentskill.com/api/agent/skills/danielroe-provenance-action
- Install API: https://www.openagentskill.com/api/skills/danielroe-provenance-action/install
- Repository: https://github.com/danielroe/provenance-action