{"query":"Incident Response & Digital Forensics","filters":{"category":null,"platform":null,"track":null,"safety":null,"include_blocked":false,"min_stars":0},"total":10,"skills":[{"rank":1,"match_type":"exact","match_score":99,"raw_match_score":1079.2,"semantic_relevance":100,"ranking_signals":{"retrieval":1054.9,"semantic":100,"quality":11.4,"projectPopularity":13,"verifiedOutcomes":0,"verifiedSource":0},"slug":"masriyan-incident-response-digital-forensics","name":"Incident Response & Digital Forensics","description":"IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology","tagline":"IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology","category":"automation","tags":["cybersecurity","incident-response","forensics","dfir","evidence","timeline","picerl","nist","agent-skill"],"author":{"name":"Masriyan","verified":false,"url":"https://github.com/Masriyan"},"attribution":{"status":"registry_indexed","statusLabel":"Registry indexed","shortLabel":"REGISTRY INDEXED","sourceLabel":"github candidate review","sourceDetail":"Masriyan/Claude-Code-CyberSecurity-Skill","creatorName":"Masriyan","creatorUrl":"https://github.com/Masriyan","sourceUrl":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/masriyan-incident-response-digital-forensics#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":397,"forks":75,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":45.45},"quality":{"score":71,"tier":"strong","label":"Strong","summary":"Solid option that is likely worth shortlisting for production workflows.","signals":[{"label":"GitHub stars","value":"397","tone":"neutral"},{"label":"Freshness","value":"2d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"MIT","tone":"neutral"}],"warnings":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation"]},"trust":{"version":"trust-score-v4","score":70,"tier":"review","label":"Manual review","summary":"Potentially useful, but at least one trust signal needs human inspection.","recommendedAction":"Inspect the repository, license, and recent activity before connecting it to agent workflows.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":62,"weight":0.13,"status":"info","detail":"397 GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":62,"weight":0.08,"status":"info","detail":"397 stars, 75 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"2d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":60,"weight":0.14,"status":"warn","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":100,"weight":0.07,"status":"pass","detail":"no high-risk permission surface in public metadata"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response"},{"id":"review_status","label":"Review status","score":66,"weight":0.05,"status":"info","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"info","label":"GitHub adoption","detail":"397 GitHub stars"},{"status":"info","label":"Stars/forks activity","detail":"397 stars, 75 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"2d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"warn","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"no high-risk permission surface in public metadata"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response"},{"status":"info","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"warn","label":"Ownership","detail":"No approved owner claim yet"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Install command has no obvious high-risk pattern"],"warnings":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","Quality score needs review","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"],"evidence":{"stars":"397 GitHub stars","repoActivity":"397 stars, 75 forks","lastPushed":"2d since push","license":"MIT","repository":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response","install":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","2d since push"]},"agentCompatibility":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","Quality score needs review","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["automation","cybersecurity","incident-response","forensics","dfir","evidence"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","Quality score needs review","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety":{"score":67,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","summary":"Usable candidate, but the agent should surface permission and audit notes before installation.","recommended_action":"Require human approval before installing into a real workspace.","auto_install_policy":"review","reasons":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","67/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"needs_review","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace.","reasons":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","67/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"research-agents","title":"Research agents"},{"slug":"github-automation","title":"GitHub automation"},{"slug":"coding-agents","title":"Coding agents"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor"],"install":{"ready":true,"command":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":397,"starsLabel":"397","forks":75,"license":"MIT","qualityScore":71,"trustScore":70,"auditScore":79},"maintenance":{"status":"fresh","label":"2d since push","daysSincePush":2,"lastPushedAt":"2026-09-03T08:31:38+00:00"},"risk":{"level":"needs_review","label":"Needs review","requiresReview":true,"notes":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","timeline_builder.py also appears truncated, missing full implementation","SKILL.md mentions 'Frameworks' metadata field but none are declared in frontmatter","Quality score needs review","Documentation summary is thin"]},"coverageTags":["Coding","GitHub automation","automation","cybersecurity","incident-response","forensics","dfir","evidence"]},"audit":{"audit_score":79,"risk_level":"needs_review","risk_label":"Needs review","warnings":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","timeline_builder.py also appears truncated, missing full implementation","SKILL.md mentions 'Frameworks' metadata field but none are declared in frontmatter","Quality score needs review","Documentation summary is thin"]},"decision":{"readiness_score":70,"readiness_label":"Prototype first","headline":"Fallback candidate for Research agents","role":"Fallback candidate","primary_fit":"Research agents","best_for":["Research agents workflows","Claude Code teams","builders willing to evaluate younger projects"],"risks":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one Research agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"masriyan-incident-response-digital-forensics","name":"Incident Response & Digital Forensics","description":"IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology","category":"automation","url":"https://www.openagentskill.com/skills/masriyan-incident-response-digital-forensics","repository":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response","github_repo":"Masriyan/Claude-Code-CyberSecurity-Skill"},"suited_tasks":["Research agents workflows","Claude Code teams","builders willing to evaluate younger projects","Search sources","Extract claims","Synthesize findings","Inspect repository metadata","Compare code changes"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add masriyan-incident-response-digital-forensics"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Incident Response & Digital Forensics\" agent skill from https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"masriyan-incident-response-digital-forensics\",\"task\":\"Install Incident Response & Digital Forensics\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Incident Response & Digital Forensics\" as a Claude Code skill from https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"masriyan-incident-response-digital-forensics\",\"task\":\"Install Incident Response & Digital Forensics\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Incident Response & Digital Forensics\" from https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"masriyan-incident-response-digital-forensics\",\"task\":\"Install Incident Response & Digital Forensics\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/masriyan-incident-response-digital-forensics/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/masriyan-incident-response-digital-forensics"},"trust":{"score":70,"label":"Manual review","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"397 GitHub stars","repoActivity":"397 stars, 75 forks","lastPushed":"2d since push","license":"MIT","repository":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response","install":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["automation","cybersecurity","incident-response","forensics","dfir","evidence"],"known_risks":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","Quality score needs review","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":79,"risk_level":"needs_review","risk_label":"Needs review","warnings":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","timeline_builder.py also appears truncated, missing full implementation","SKILL.md mentions 'Frameworks' metadata field but none are declared in frontmatter","Quality score needs review","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":71,"label":"Strong"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"2d since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","production agents without a repository review","evidence_collector.py truncates at ~400 lines, likely incomplete implementation","No OpenAgentSkill engagement data yet","timeline_builder.py also appears truncated, missing full implementation","SKILL.md mentions 'Frameworks' metadata field but none are declared in frontmatter","Quality score needs review","Documentation summary is thin"],"agent_contract":{"task_input":"Use Incident Response & Digital Forensics in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 70/100 Manual review","Audit: 79/100 Needs review","Safety: 67/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"masriyan-incident-response-digital-forensics (Incident Response & Digital Forensics)","install_command":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","risk_summary":"Needs review; Reviewed with permission notes; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"masriyan-incident-response-digital-forensics","task":"Use Incident Response & Digital Forensics in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/masriyan-incident-response-digital-forensics","api":"https://www.openagentskill.com/api/agent/skills/masriyan-incident-response-digital-forensics","audit":"https://www.openagentskill.com/skills/masriyan-incident-response-digital-forensics/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=masriyan-incident-response-digital-forensics&task=Use%20Incident%20Response%20%26%20Digital%20Forensics%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Incident%20Response%20%26%20Digital%20Forensics%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Incident%20Response%20%26%20Digital%20Forensics%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/masriyan-incident-response-digital-forensics/install","manifest":"https://www.openagentskill.com/api/registry/manifest/masriyan-incident-response-digital-forensics"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"masriyan-incident-response-digital-forensics","name":"Incident Response & Digital Forensics","description":"IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology","category":"automation","url":"https://www.openagentskill.com/skills/masriyan-incident-response-digital-forensics","repository":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response","github_repo":"Masriyan/Claude-Code-CyberSecurity-Skill"},"suited_tasks":["Research agents workflows","Claude Code teams","builders willing to evaluate younger projects","Search sources","Extract claims","Synthesize findings","Inspect repository metadata","Compare code changes"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add masriyan-incident-response-digital-forensics"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Incident Response & Digital Forensics\" agent skill from https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"masriyan-incident-response-digital-forensics\",\"task\":\"Install Incident Response & Digital Forensics\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Incident Response & Digital Forensics\" as a Claude Code skill from https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"masriyan-incident-response-digital-forensics\",\"task\":\"Install Incident Response & Digital Forensics\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Incident Response & Digital Forensics\" from https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"masriyan-incident-response-digital-forensics\",\"task\":\"Install Incident Response & Digital Forensics\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/masriyan-incident-response-digital-forensics/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/masriyan-incident-response-digital-forensics"},"trust":{"score":70,"label":"Manual review","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"397 GitHub stars","repoActivity":"397 stars, 75 forks","lastPushed":"2d since push","license":"MIT","repository":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response","install":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["automation","cybersecurity","incident-response","forensics","dfir","evidence"],"known_risks":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","Quality score needs review","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":79,"risk_level":"needs_review","risk_label":"Needs review","warnings":["evidence_collector.py truncates at ~400 lines, likely incomplete implementation","timeline_builder.py also appears truncated, missing full implementation","SKILL.md mentions 'Frameworks' metadata field but none are declared in frontmatter","Quality score needs review","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":71,"label":"Strong"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"2d since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","production agents without a repository review","evidence_collector.py truncates at ~400 lines, likely incomplete implementation","No OpenAgentSkill engagement data yet","timeline_builder.py also appears truncated, missing full implementation","SKILL.md mentions 'Frameworks' metadata field but none are declared in frontmatter","Quality score needs review","Documentation summary is thin"],"agent_contract":{"task_input":"Use Incident Response & Digital Forensics in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 70/100 Manual review","Audit: 79/100 Needs review","Safety: 67/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"masriyan-incident-response-digital-forensics (Incident Response & Digital Forensics)","install_command":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","risk_summary":"Needs review; Reviewed with permission notes; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"masriyan-incident-response-digital-forensics","task":"Use Incident Response & Digital Forensics in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/masriyan-incident-response-digital-forensics","api":"https://www.openagentskill.com/api/agent/skills/masriyan-incident-response-digital-forensics","audit":"https://www.openagentskill.com/skills/masriyan-incident-response-digital-forensics/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=masriyan-incident-response-digital-forensics&task=Use%20Incident%20Response%20%26%20Digital%20Forensics%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Incident%20Response%20%26%20Digital%20Forensics%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Incident%20Response%20%26%20Digital%20Forensics%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/masriyan-incident-response-digital-forensics/install","manifest":"https://www.openagentskill.com/api/registry/manifest/masriyan-incident-response-digital-forensics"}},"platforms":["Claude Code"],"use_cases":[{"slug":"research-agents","title":"Research agents","url":"https://www.openagentskill.com/use-cases/research-agents"},{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"browser-automation","title":"Browser automation","url":"https://www.openagentskill.com/use-cases/browser-automation"}],"install":"npx skills add Masriyan/Claude-Code-CyberSecurity-Skill --skill Incident Response & Digital Forensics","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add masriyan-incident-response-digital-forensics","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Incident Response & Digital Forensics\" agent skill from https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"masriyan-incident-response-digital-forensics\",\"task\":\"Install Incident Response & Digital Forensics\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Incident Response & Digital Forensics\" as a Claude Code skill from https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"masriyan-incident-response-digital-forensics\",\"task\":\"Install Incident Response & Digital Forensics\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Incident Response & Digital Forensics\" from https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: IR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodology After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"masriyan-incident-response-digital-forensics\",\"task\":\"Install Incident Response & Digital Forensics\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response","github_repo":"Masriyan/Claude-Code-CyberSecurity-Skill","version":"3.0.0","license":"MIT","updated_at":"2026-09-05T18:26:46.850663+00:00","canonical_key":"masriyan/claude-code-cybersecurity-skill#skills/07-incident-response","recommendation_reasons":["Matches task terms: incident, response, digital, forensics","Install handoff is available","Repository freshness signal is available","Registry match score 99"],"urls":{"web":"https://www.openagentskill.com/skills/masriyan-incident-response-digital-forensics","api":"https://www.openagentskill.com/api/agent/skills/masriyan-incident-response-digital-forensics","install_api":"https://www.openagentskill.com/api/skills/masriyan-incident-response-digital-forensics/install","audit":"https://www.openagentskill.com/skills/masriyan-incident-response-digital-forensics/audit","repository":"https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill/tree/main/skills/07-incident-response"}},{"rank":2,"match_type":"related","match_score":31,"raw_match_score":341.1,"semantic_relevance":42,"ranking_signals":{"retrieval":306,"semantic":42,"quality":14,"projectPopularity":15.1,"verifiedOutcomes":0,"verifiedSource":6},"slug":"pagerduty-incident-response-docs","name":"Incident Response Docs","description":"PagerDuty's Incident Response Documentation.","tagline":"PagerDuty's Incident Response Documentation.","category":"devops","tags":["incident-response","reliability","devops","documentation","oncall","pagerduty","team-security","dockerfile","github"],"author":{"name":"PagerDuty","verified":true,"url":"https://github.com/PagerDuty"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"PagerDuty/incident-response-docs","creatorName":"PagerDuty","creatorUrl":"https://github.com/PagerDuty","sourceUrl":"https://github.com/PagerDuty/incident-response-docs","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/pagerduty-incident-response-docs#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":1046,"forks":221,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":55.84},"quality":{"score":86,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"1.0K","tone":"positive"},{"label":"Freshness","value":"5mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Apache-2.0","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":84,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout.","recommendedAction":"Test in a sandbox workflow and compare its install path with close alternatives.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"1.0K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":77,"weight":0.08,"status":"info","detail":"1.0K stars, 221 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":76,"weight":0.14,"status":"info","detail":"5mo since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"Apache-2.0"},{"id":"documentation","label":"README/SKILL.md completeness","score":50,"weight":0.14,"status":"warn","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add PagerDuty/incident-response-docs"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":100,"weight":0.07,"status":"pass","detail":"no high-risk permission surface in public metadata"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/PagerDuty/incident-response-docs"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"1.0K GitHub stars"},{"status":"info","label":"Stars/forks activity","detail":"1.0K stars, 221 forks; issue activity unavailable in current metadata"},{"status":"info","label":"Recent maintenance","detail":"5mo since push"},{"status":"pass","label":"License clarity","detail":"Apache-2.0"},{"status":"warn","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add PagerDuty/incident-response-docs"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"no high-risk permission surface in public metadata"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/PagerDuty/incident-response-docs"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"],"evidence":{"stars":"1.0K GitHub stars","repoActivity":"1.0K stars, 221 forks","lastPushed":"5mo since push","license":"Apache-2.0","repository":"https://github.com/PagerDuty/incident-response-docs","install":"npx skills add PagerDuty/incident-response-docs","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add PagerDuty/incident-response-docs","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","5mo since push"]},"agentCompatibility":["Dockerfile","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["devops","incident-response","reliability","documentation","oncall","pagerduty"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety":{"score":72,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","summary":"Good audit and safety signals with no high-risk permission hints in public metadata.","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","auto_install_policy":"review","reasons":["Safe-to-try audit","72/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["Documentation summary is thin"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","reasons":["Safe-to-try audit","72/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"github-automation","title":"GitHub automation"},{"slug":"coding-agents","title":"Coding agents"},{"slug":"rag-knowledge","title":"RAG and knowledge"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","Dockerfile"],"install":{"ready":true,"command":"npx skills add PagerDuty/incident-response-docs","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":1046,"starsLabel":"1.0K","forks":221,"license":"Apache-2.0","qualityScore":86,"trustScore":84,"auditScore":84},"maintenance":{"status":"active","label":"5mo since push","daysSincePush":149,"lastPushedAt":"2026-04-09T17:47:57+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"coverageTags":["Coding","GitHub automation","devops","incident-response","reliability","documentation","oncall","pagerduty"]},"audit":{"audit_score":84,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"decision":{"readiness_score":97,"readiness_label":"Production-ready","headline":"Primary pick for GitHub automation","role":"Primary pick","primary_fit":"GitHub automation","best_for":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one GitHub automation task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"pagerduty-incident-response-docs","name":"Incident Response Docs","description":"PagerDuty's Incident Response Documentation.","category":"devops","url":"https://www.openagentskill.com/skills/pagerduty-incident-response-docs","repository":"https://github.com/PagerDuty/incident-response-docs","github_repo":"PagerDuty/incident-response-docs"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Inspect source files","Explain architecture"],"suited_agents":["Dockerfile","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add PagerDuty/incident-response-docs","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add pagerduty-incident-response-docs"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Incident Response Docs\" agent skill from https://github.com/PagerDuty/incident-response-docs. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: PagerDuty's Incident Response Documentation. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"pagerduty-incident-response-docs\",\"task\":\"Install Incident Response Docs\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Incident Response Docs\" as a Claude Code skill from https://github.com/PagerDuty/incident-response-docs. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: PagerDuty's Incident Response Documentation. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"pagerduty-incident-response-docs\",\"task\":\"Install Incident Response Docs\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Incident Response Docs\" from https://github.com/PagerDuty/incident-response-docs into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: PagerDuty's Incident Response Documentation. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"pagerduty-incident-response-docs\",\"task\":\"Install Incident Response Docs\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/pagerduty-incident-response-docs/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/pagerduty-incident-response-docs"},"trust":{"score":84,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"1.0K GitHub stars","repoActivity":"1.0K stars, 221 forks","lastPushed":"5mo since push","license":"Apache-2.0","repository":"https://github.com/PagerDuty/incident-response-docs","install":"npx skills add PagerDuty/incident-response-docs","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","documentation","oncall","pagerduty"],"known_risks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":84,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":86,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"5mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"agent_contract":{"task_input":"Use Incident Response Docs in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 84/100 Strong shortlist","Audit: 84/100 Safe to try","Safety: 72/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"pagerduty-incident-response-docs (Incident Response Docs)","install_command":"npx skills add PagerDuty/incident-response-docs","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"pagerduty-incident-response-docs","task":"Use Incident Response Docs in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/pagerduty-incident-response-docs","api":"https://www.openagentskill.com/api/agent/skills/pagerduty-incident-response-docs","audit":"https://www.openagentskill.com/skills/pagerduty-incident-response-docs/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=pagerduty-incident-response-docs&task=Use%20Incident%20Response%20Docs%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Incident%20Response%20Docs%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Incident%20Response%20Docs%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/pagerduty-incident-response-docs/install","manifest":"https://www.openagentskill.com/api/registry/manifest/pagerduty-incident-response-docs"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"pagerduty-incident-response-docs","name":"Incident Response Docs","description":"PagerDuty's Incident Response Documentation.","category":"devops","url":"https://www.openagentskill.com/skills/pagerduty-incident-response-docs","repository":"https://github.com/PagerDuty/incident-response-docs","github_repo":"PagerDuty/incident-response-docs"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Inspect source files","Explain architecture"],"suited_agents":["Dockerfile","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add PagerDuty/incident-response-docs","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add pagerduty-incident-response-docs"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Incident Response Docs\" agent skill from https://github.com/PagerDuty/incident-response-docs. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: PagerDuty's Incident Response Documentation. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"pagerduty-incident-response-docs\",\"task\":\"Install Incident Response Docs\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Incident Response Docs\" as a Claude Code skill from https://github.com/PagerDuty/incident-response-docs. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: PagerDuty's Incident Response Documentation. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"pagerduty-incident-response-docs\",\"task\":\"Install Incident Response Docs\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Incident Response Docs\" from https://github.com/PagerDuty/incident-response-docs into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: PagerDuty's Incident Response Documentation. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"pagerduty-incident-response-docs\",\"task\":\"Install Incident Response Docs\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/pagerduty-incident-response-docs/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/pagerduty-incident-response-docs"},"trust":{"score":84,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"1.0K GitHub stars","repoActivity":"1.0K stars, 221 forks","lastPushed":"5mo since push","license":"Apache-2.0","repository":"https://github.com/PagerDuty/incident-response-docs","install":"npx skills add PagerDuty/incident-response-docs","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","documentation","oncall","pagerduty"],"known_risks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":84,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":86,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"5mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"agent_contract":{"task_input":"Use Incident Response Docs in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 84/100 Strong shortlist","Audit: 84/100 Safe to try","Safety: 72/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"pagerduty-incident-response-docs (Incident Response Docs)","install_command":"npx skills add PagerDuty/incident-response-docs","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"pagerduty-incident-response-docs","task":"Use Incident Response Docs in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/pagerduty-incident-response-docs","api":"https://www.openagentskill.com/api/agent/skills/pagerduty-incident-response-docs","audit":"https://www.openagentskill.com/skills/pagerduty-incident-response-docs/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=pagerduty-incident-response-docs&task=Use%20Incident%20Response%20Docs%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Incident%20Response%20Docs%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Incident%20Response%20Docs%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/pagerduty-incident-response-docs/install","manifest":"https://www.openagentskill.com/api/registry/manifest/pagerduty-incident-response-docs"}},"platforms":["Dockerfile","Incident Response"],"use_cases":[{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"rag-knowledge","title":"RAG and knowledge","url":"https://www.openagentskill.com/use-cases/rag-knowledge"},{"slug":"workflow-automation","title":"Workflow automation","url":"https://www.openagentskill.com/use-cases/workflow-automation"}],"install":"npx skills add PagerDuty/incident-response-docs","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add pagerduty-incident-response-docs","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Incident Response Docs\" agent skill from https://github.com/PagerDuty/incident-response-docs. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: PagerDuty's Incident Response Documentation. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"pagerduty-incident-response-docs\",\"task\":\"Install Incident Response Docs\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Incident Response Docs\" as a Claude Code skill from https://github.com/PagerDuty/incident-response-docs. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: PagerDuty's Incident Response Documentation. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"pagerduty-incident-response-docs\",\"task\":\"Install Incident Response Docs\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Incident Response Docs\" from https://github.com/PagerDuty/incident-response-docs into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: PagerDuty's Incident Response Documentation. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"pagerduty-incident-response-docs\",\"task\":\"Install Incident Response Docs\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/PagerDuty/incident-response-docs","github_repo":"PagerDuty/incident-response-docs","version":"1.0.0","license":"Apache-2.0","updated_at":"2026-09-01T11:59:28.941454+00:00","canonical_key":"pagerduty/incident-response-docs","recommendation_reasons":["Matches task terms: incident, response","Useful GitHub adoption: 1,046 stars","Install handoff is available","Repository freshness signal is available","Registry match score 31"],"urls":{"web":"https://www.openagentskill.com/skills/pagerduty-incident-response-docs","api":"https://www.openagentskill.com/api/agent/skills/pagerduty-incident-response-docs","install_api":"https://www.openagentskill.com/api/skills/pagerduty-incident-response-docs/install","audit":"https://www.openagentskill.com/skills/pagerduty-incident-response-docs/audit","repository":"https://github.com/PagerDuty/incident-response-docs"}},{"rank":3,"match_type":"related","match_score":28,"raw_match_score":303.8,"semantic_relevance":42,"ranking_signals":{"retrieval":266,"semantic":42,"quality":14.7,"projectPopularity":17.1,"verifiedOutcomes":0,"verifiedSource":6},"slug":"frankwxu-digital-forensics-lab","name":"Digital Forensics Lab","description":"Free hands-on digital forensics labs for students and faculty","tagline":"Free hands-on digital forensics labs for students and faculty","category":"education","tags":["education","learning","cyber","cybercrime","cybersecurity","cybersecurity-education","digital","forensics","free","hands-on"],"author":{"name":"frankwxu","verified":true,"url":"https://github.com/frankwxu"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"frankwxu/digital-forensics-lab","creatorName":"frankwxu","creatorUrl":"https://github.com/frankwxu","sourceUrl":"https://github.com/frankwxu/digital-forensics-lab","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/frankwxu-digital-forensics-lab#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":2645,"forks":561,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":58.66},"quality":{"score":85,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"2.6K","tone":"positive"},{"label":"Freshness","value":"6mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Unknown","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":81,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout.","recommendedAction":"Test in a sandbox workflow and compare its install path with close alternatives.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"2.6K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":83,"weight":0.08,"status":"pass","detail":"2.6K stars, 561 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":76,"weight":0.14,"status":"info","detail":"6mo since push"},{"id":"license","label":"License clarity","score":42,"weight":0.09,"status":"warn","detail":"Unknown"},{"id":"documentation","label":"README/SKILL.md completeness","score":50,"weight":0.14,"status":"warn","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add frankwxu/digital-forensics-lab"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":100,"weight":0.07,"status":"pass","detail":"no high-risk permission surface in public metadata"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/frankwxu/digital-forensics-lab"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"2.6K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"2.6K stars, 561 forks; issue activity unavailable in current metadata"},{"status":"info","label":"Recent maintenance","detail":"6mo since push"},{"status":"warn","label":"License clarity","detail":"Unknown"},{"status":"warn","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add frankwxu/digital-forensics-lab"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"no high-risk permission surface in public metadata"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/frankwxu/digital-forensics-lab"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"],"evidence":{"stars":"2.6K GitHub stars","repoActivity":"2.6K stars, 561 forks","lastPushed":"6mo since push","license":"Unknown","repository":"https://github.com/frankwxu/digital-forensics-lab","install":"npx skills add frankwxu/digital-forensics-lab","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add frankwxu/digital-forensics-lab","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is unclear","No Agent Proven outcome evidence yet","6mo since push"]},"agentCompatibility":["Jupyter Notebook","Education","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["education","learning","cyber","cybercrime","cybersecurity","cybersecurity-education"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace","Commercial reuse before clarifying license terms"],"knownRisks":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety":{"score":70,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","summary":"Usable candidate, but the agent should surface permission and audit notes before installation.","recommended_action":"Require human approval before installing into a real workspace.","auto_install_policy":"review","reasons":["License is unclear","70/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"needs_review","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["License is unclear"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace.","reasons":["License is unclear","70/100 agent safety score"]},"supply_profile":{"track":{"slug":"education","label":"Education and tutoring","shortLabel":"Education","description":"Tutoring, course generation, quizzes, learning analytics, classrooms, and teaching workflows."},"scenario":{"label":"Education and tutoring","description":"I need my agent to teach a topic, generate course material, create quizzes, or analyze learning progress.","useCases":[{"slug":"education-tutoring","title":"Education and tutoring"},{"slug":"data-analysis","title":"Data analysis"},{"slug":"github-automation","title":"GitHub automation"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","Jupyter Notebook"],"install":{"ready":true,"command":"npx skills add frankwxu/digital-forensics-lab","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":2645,"starsLabel":"2.6K","forks":561,"license":"Unknown","qualityScore":85,"trustScore":81,"auditScore":82},"maintenance":{"status":"active","label":"6mo since push","daysSincePush":168,"lastPushedAt":"2026-03-21T14:15:00+00:00"},"risk":{"level":"needs_review","label":"Needs review","requiresReview":true,"notes":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Needs review"]},"coverageTags":["Education","Education and tutoring","learning","cyber","cybercrime","cybersecurity","cybersecurity-education","digital"]},"audit":{"audit_score":82,"risk_level":"needs_review","risk_label":"Needs review","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"decision":{"readiness_score":96,"readiness_label":"Production-ready","headline":"Primary pick for Education and tutoring","role":"Primary pick","primary_fit":"Education and tutoring","best_for":["Education and tutoring workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one Education and tutoring task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"frankwxu-digital-forensics-lab","name":"Digital Forensics Lab","description":"Free hands-on digital forensics labs for students and faculty","category":"education","url":"https://www.openagentskill.com/skills/frankwxu-digital-forensics-lab","repository":"https://github.com/frankwxu/digital-forensics-lab","github_repo":"frankwxu/digital-forensics-lab"},"suited_tasks":["Education and tutoring workflows","general agent builders","teams that value GitHub adoption signals","Break down concepts","Create practice material","Adapt explanations to the learner","Load tabular data","Calculate trends"],"suited_agents":["Jupyter Notebook","Education","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add frankwxu/digital-forensics-lab","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add frankwxu-digital-forensics-lab"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Digital Forensics Lab\" agent skill from https://github.com/frankwxu/digital-forensics-lab. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Free hands-on digital forensics labs for students and faculty After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"frankwxu-digital-forensics-lab\",\"task\":\"Install Digital Forensics Lab\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Digital Forensics Lab\" as a Claude Code skill from https://github.com/frankwxu/digital-forensics-lab. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Free hands-on digital forensics labs for students and faculty After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"frankwxu-digital-forensics-lab\",\"task\":\"Install Digital Forensics Lab\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Digital Forensics Lab\" from https://github.com/frankwxu/digital-forensics-lab into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Free hands-on digital forensics labs for students and faculty After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"frankwxu-digital-forensics-lab\",\"task\":\"Install Digital Forensics Lab\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/frankwxu-digital-forensics-lab/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/frankwxu-digital-forensics-lab"},"trust":{"score":81,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"2.6K GitHub stars","repoActivity":"2.6K stars, 561 forks","lastPushed":"6mo since push","license":"Unknown","repository":"https://github.com/frankwxu/digital-forensics-lab","install":"npx skills add frankwxu/digital-forensics-lab","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["education","learning","cyber","cybercrime","cybersecurity","cybersecurity-education"],"known_risks":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":82,"risk_level":"needs_review","risk_label":"Needs review","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":85,"label":"Excellent"},"supply":{"track":"Education and tutoring","scenario":"Education and tutoring","maintenance":"6mo since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review"],"agent_contract":{"task_input":"Use Digital Forensics Lab in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 81/100 Strong shortlist","Audit: 82/100 Needs review","Safety: 70/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"frankwxu-digital-forensics-lab (Digital Forensics Lab)","install_command":"npx skills add frankwxu/digital-forensics-lab","risk_summary":"Needs review; Reviewed with permission notes; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"frankwxu-digital-forensics-lab","task":"Use Digital Forensics Lab in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/frankwxu-digital-forensics-lab","api":"https://www.openagentskill.com/api/agent/skills/frankwxu-digital-forensics-lab","audit":"https://www.openagentskill.com/skills/frankwxu-digital-forensics-lab/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=frankwxu-digital-forensics-lab&task=Use%20Digital%20Forensics%20Lab%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Digital%20Forensics%20Lab%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Digital%20Forensics%20Lab%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/frankwxu-digital-forensics-lab/install","manifest":"https://www.openagentskill.com/api/registry/manifest/frankwxu-digital-forensics-lab"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"frankwxu-digital-forensics-lab","name":"Digital Forensics Lab","description":"Free hands-on digital forensics labs for students and faculty","category":"education","url":"https://www.openagentskill.com/skills/frankwxu-digital-forensics-lab","repository":"https://github.com/frankwxu/digital-forensics-lab","github_repo":"frankwxu/digital-forensics-lab"},"suited_tasks":["Education and tutoring workflows","general agent builders","teams that value GitHub adoption signals","Break down concepts","Create practice material","Adapt explanations to the learner","Load tabular data","Calculate trends"],"suited_agents":["Jupyter Notebook","Education","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add frankwxu/digital-forensics-lab","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add frankwxu-digital-forensics-lab"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Digital Forensics Lab\" agent skill from https://github.com/frankwxu/digital-forensics-lab. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Free hands-on digital forensics labs for students and faculty After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"frankwxu-digital-forensics-lab\",\"task\":\"Install Digital Forensics Lab\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Digital Forensics Lab\" as a Claude Code skill from https://github.com/frankwxu/digital-forensics-lab. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Free hands-on digital forensics labs for students and faculty After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"frankwxu-digital-forensics-lab\",\"task\":\"Install Digital Forensics Lab\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Digital Forensics Lab\" from https://github.com/frankwxu/digital-forensics-lab into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Free hands-on digital forensics labs for students and faculty After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"frankwxu-digital-forensics-lab\",\"task\":\"Install Digital Forensics Lab\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/frankwxu-digital-forensics-lab/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/frankwxu-digital-forensics-lab"},"trust":{"score":81,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"2.6K GitHub stars","repoActivity":"2.6K stars, 561 forks","lastPushed":"6mo since push","license":"Unknown","repository":"https://github.com/frankwxu/digital-forensics-lab","install":"npx skills add frankwxu/digital-forensics-lab","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["education","learning","cyber","cybercrime","cybersecurity","cybersecurity-education"],"known_risks":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":82,"risk_level":"needs_review","risk_label":"Needs review","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":85,"label":"Excellent"},"supply":{"track":"Education and tutoring","scenario":"Education and tutoring","maintenance":"6mo since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review"],"agent_contract":{"task_input":"Use Digital Forensics Lab in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 81/100 Strong shortlist","Audit: 82/100 Needs review","Safety: 70/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"frankwxu-digital-forensics-lab (Digital Forensics Lab)","install_command":"npx skills add frankwxu/digital-forensics-lab","risk_summary":"Needs review; Reviewed with permission notes; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"frankwxu-digital-forensics-lab","task":"Use Digital Forensics Lab in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/frankwxu-digital-forensics-lab","api":"https://www.openagentskill.com/api/agent/skills/frankwxu-digital-forensics-lab","audit":"https://www.openagentskill.com/skills/frankwxu-digital-forensics-lab/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=frankwxu-digital-forensics-lab&task=Use%20Digital%20Forensics%20Lab%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Digital%20Forensics%20Lab%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Digital%20Forensics%20Lab%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/frankwxu-digital-forensics-lab/install","manifest":"https://www.openagentskill.com/api/registry/manifest/frankwxu-digital-forensics-lab"}},"platforms":["Jupyter Notebook","Education"],"use_cases":[{"slug":"education-tutoring","title":"Education and tutoring","url":"https://www.openagentskill.com/use-cases/education-tutoring"},{"slug":"data-analysis","title":"Data analysis","url":"https://www.openagentskill.com/use-cases/data-analysis"},{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"security-compliance","title":"Security and compliance","url":"https://www.openagentskill.com/use-cases/security-compliance"}],"install":"npx skills add frankwxu/digital-forensics-lab","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add frankwxu-digital-forensics-lab","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Digital Forensics Lab\" agent skill from https://github.com/frankwxu/digital-forensics-lab. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Free hands-on digital forensics labs for students and faculty After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"frankwxu-digital-forensics-lab\",\"task\":\"Install Digital Forensics Lab\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Digital Forensics Lab\" as a Claude Code skill from https://github.com/frankwxu/digital-forensics-lab. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Free hands-on digital forensics labs for students and faculty After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"frankwxu-digital-forensics-lab\",\"task\":\"Install Digital Forensics Lab\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Digital Forensics Lab\" from https://github.com/frankwxu/digital-forensics-lab into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Free hands-on digital forensics labs for students and faculty After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"frankwxu-digital-forensics-lab\",\"task\":\"Install Digital Forensics Lab\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/frankwxu/digital-forensics-lab","github_repo":"frankwxu/digital-forensics-lab","version":"1.0.0","license":"Unknown","updated_at":"2026-09-01T11:59:28.941454+00:00","canonical_key":"frankwxu/digital-forensics-lab","recommendation_reasons":["Matches task terms: digital, forensics","Useful GitHub adoption: 2,645 stars","Install handoff is available","Repository freshness signal is available","Registry match score 28"],"urls":{"web":"https://www.openagentskill.com/skills/frankwxu-digital-forensics-lab","api":"https://www.openagentskill.com/api/agent/skills/frankwxu-digital-forensics-lab","install_api":"https://www.openagentskill.com/api/skills/frankwxu-digital-forensics-lab/install","audit":"https://www.openagentskill.com/skills/frankwxu-digital-forensics-lab/audit","repository":"https://github.com/frankwxu/digital-forensics-lab"}},{"rank":4,"match_type":"related","match_score":27,"raw_match_score":295.1,"semantic_relevance":54,"ranking_signals":{"retrieval":258,"semantic":54,"quality":15.2,"projectPopularity":15.9,"verifiedOutcomes":0,"verifiedSource":6},"slug":"dfir-iris-iris-web","name":"Iris Web","description":"Collaborative Incident Response platform","tagline":"Collaborative Incident Response platform","category":"devops","tags":["incident-response","reliability","devops","csirt-tooling","digital-forensics","digital-forensics-incident-response","forensic","forensic-analysis","forensic-tools","python"],"author":{"name":"dfir-iris","verified":true,"url":"https://github.com/dfir-iris"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"dfir-iris/iris-web","creatorName":"dfir-iris","creatorUrl":"https://github.com/dfir-iris","sourceUrl":"https://github.com/dfir-iris/iris-web","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/dfir-iris-iris-web#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":1508,"forks":306,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":60.95},"quality":{"score":91,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"1.5K","tone":"positive"},{"label":"Freshness","value":"3mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"LGPL-3.0","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":86,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"1.5K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":83,"weight":0.08,"status":"pass","detail":"1.5K stars, 306 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":88,"weight":0.14,"status":"pass","detail":"3mo since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"LGPL-3.0"},{"id":"documentation","label":"README/SKILL.md completeness","score":50,"weight":0.14,"status":"warn","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add dfir-iris/iris-web"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":100,"weight":0.07,"status":"pass","detail":"no high-risk permission surface in public metadata"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/dfir-iris/iris-web"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"1.5K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"1.5K stars, 306 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"3mo since push"},{"status":"pass","label":"License clarity","detail":"LGPL-3.0"},{"status":"warn","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add dfir-iris/iris-web"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"no high-risk permission surface in public metadata"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/dfir-iris/iris-web"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"],"evidence":{"stars":"1.5K GitHub stars","repoActivity":"1.5K stars, 306 forks","lastPushed":"3mo since push","license":"LGPL-3.0","repository":"https://github.com/dfir-iris/iris-web","install":"npx skills add dfir-iris/iris-web","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add dfir-iris/iris-web","policy":"agent_install_candidate","label":"Agent install candidate","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","3mo since push"]},"agentCompatibility":["Python","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":true,"sandboxRequired":true,"policy":"agent_install_candidate","reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"bestFor":["devops","incident-response","reliability","csirt-tooling","digital-forensics","digital-forensics-incident-response"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"knownRisks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety":{"score":76,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","summary":"Good audit and safety signals with no high-risk permission hints in public metadata.","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","auto_install_policy":"review","reasons":["Safe-to-try audit","76/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["Documentation summary is thin"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","reasons":["Safe-to-try audit","76/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"github-automation","title":"GitHub automation"},{"slug":"browser-automation","title":"Browser automation"},{"slug":"research-agents","title":"Research agents"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","Python"],"install":{"ready":true,"command":"npx skills add dfir-iris/iris-web","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":1508,"starsLabel":"1.5K","forks":306,"license":"LGPL-3.0","qualityScore":91,"trustScore":86,"auditScore":88},"maintenance":{"status":"active","label":"3mo since push","daysSincePush":89,"lastPushedAt":"2026-06-08T13:27:16+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"coverageTags":["Coding","GitHub automation","devops","incident-response","reliability","csirt-tooling","digital-forensics","digital-forensics-incident-response"]},"audit":{"audit_score":88,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for GitHub automation","role":"Primary pick","primary_fit":"GitHub automation","best_for":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one GitHub automation task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"dfir-iris-iris-web","name":"Iris Web","description":"Collaborative Incident Response platform","category":"devops","url":"https://www.openagentskill.com/skills/dfir-iris-iris-web","repository":"https://github.com/dfir-iris/iris-web","github_repo":"dfir-iris/iris-web"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Navigate pages","Click and type safely"],"suited_agents":["Python","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add dfir-iris/iris-web","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add dfir-iris-iris-web"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Iris Web\" agent skill from https://github.com/dfir-iris/iris-web. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Collaborative Incident Response platform After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"dfir-iris-iris-web\",\"task\":\"Install Iris Web\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Iris Web\" as a Claude Code skill from https://github.com/dfir-iris/iris-web. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Collaborative Incident Response platform After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"dfir-iris-iris-web\",\"task\":\"Install Iris Web\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Iris Web\" from https://github.com/dfir-iris/iris-web into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Collaborative Incident Response platform After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"dfir-iris-iris-web\",\"task\":\"Install Iris Web\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/dfir-iris-iris-web/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/dfir-iris-iris-web"},"trust":{"score":86,"label":"Production candidate","version":"trust-score-v4","install_policy":"agent_install_candidate","evidence":{"stars":"1.5K GitHub stars","repoActivity":"1.5K stars, 306 forks","lastPushed":"3mo since push","license":"LGPL-3.0","repository":"https://github.com/dfir-iris/iris-web","install":"npx skills add dfir-iris/iris-web","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":true,"sandbox_required":true,"reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"best_for":["devops","incident-response","reliability","csirt-tooling","digital-forensics","digital-forensics-incident-response"],"known_risks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":88,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":91,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"agent_contract":{"task_input":"Use Iris Web in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 86/100 Production candidate","Audit: 88/100 Safe to try","Safety: 76/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"dfir-iris-iris-web (Iris Web)","install_command":"npx skills add dfir-iris/iris-web","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"dfir-iris-iris-web","task":"Use Iris Web in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/dfir-iris-iris-web","api":"https://www.openagentskill.com/api/agent/skills/dfir-iris-iris-web","audit":"https://www.openagentskill.com/skills/dfir-iris-iris-web/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=dfir-iris-iris-web&task=Use%20Iris%20Web%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Iris%20Web%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Iris%20Web%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/dfir-iris-iris-web/install","manifest":"https://www.openagentskill.com/api/registry/manifest/dfir-iris-iris-web"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"dfir-iris-iris-web","name":"Iris Web","description":"Collaborative Incident Response platform","category":"devops","url":"https://www.openagentskill.com/skills/dfir-iris-iris-web","repository":"https://github.com/dfir-iris/iris-web","github_repo":"dfir-iris/iris-web"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Navigate pages","Click and type safely"],"suited_agents":["Python","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add dfir-iris/iris-web","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add dfir-iris-iris-web"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Iris Web\" agent skill from https://github.com/dfir-iris/iris-web. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Collaborative Incident Response platform After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"dfir-iris-iris-web\",\"task\":\"Install Iris Web\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Iris Web\" as a Claude Code skill from https://github.com/dfir-iris/iris-web. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Collaborative Incident Response platform After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"dfir-iris-iris-web\",\"task\":\"Install Iris Web\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Iris Web\" from https://github.com/dfir-iris/iris-web into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Collaborative Incident Response platform After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"dfir-iris-iris-web\",\"task\":\"Install Iris Web\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/dfir-iris-iris-web/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/dfir-iris-iris-web"},"trust":{"score":86,"label":"Production candidate","version":"trust-score-v4","install_policy":"agent_install_candidate","evidence":{"stars":"1.5K GitHub stars","repoActivity":"1.5K stars, 306 forks","lastPushed":"3mo since push","license":"LGPL-3.0","repository":"https://github.com/dfir-iris/iris-web","install":"npx skills add dfir-iris/iris-web","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":true,"sandbox_required":true,"reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"best_for":["devops","incident-response","reliability","csirt-tooling","digital-forensics","digital-forensics-incident-response"],"known_risks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":88,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":91,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"agent_contract":{"task_input":"Use Iris Web in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 86/100 Production candidate","Audit: 88/100 Safe to try","Safety: 76/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"dfir-iris-iris-web (Iris Web)","install_command":"npx skills add dfir-iris/iris-web","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"dfir-iris-iris-web","task":"Use Iris Web in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/dfir-iris-iris-web","api":"https://www.openagentskill.com/api/agent/skills/dfir-iris-iris-web","audit":"https://www.openagentskill.com/skills/dfir-iris-iris-web/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=dfir-iris-iris-web&task=Use%20Iris%20Web%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Iris%20Web%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Iris%20Web%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/dfir-iris-iris-web/install","manifest":"https://www.openagentskill.com/api/registry/manifest/dfir-iris-iris-web"}},"platforms":["Python","Incident Response"],"use_cases":[{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"browser-automation","title":"Browser automation","url":"https://www.openagentskill.com/use-cases/browser-automation"},{"slug":"research-agents","title":"Research agents","url":"https://www.openagentskill.com/use-cases/research-agents"},{"slug":"testing-qa","title":"Testing and QA","url":"https://www.openagentskill.com/use-cases/testing-qa"}],"install":"npx skills add dfir-iris/iris-web","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add dfir-iris-iris-web","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Iris Web\" agent skill from https://github.com/dfir-iris/iris-web. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Collaborative Incident Response platform After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"dfir-iris-iris-web\",\"task\":\"Install Iris Web\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Iris Web\" as a Claude Code skill from https://github.com/dfir-iris/iris-web. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Collaborative Incident Response platform After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"dfir-iris-iris-web\",\"task\":\"Install Iris Web\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Iris Web\" from https://github.com/dfir-iris/iris-web into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Collaborative Incident Response platform After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"dfir-iris-iris-web\",\"task\":\"Install Iris Web\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/dfir-iris/iris-web","github_repo":"dfir-iris/iris-web","version":"1.0.0","license":"LGPL-3.0","updated_at":"2026-09-01T11:59:28.941454+00:00","canonical_key":"dfir-iris/iris-web","recommendation_reasons":["Matches task terms: incident, response, digital, forensics","Useful GitHub adoption: 1,508 stars","Install handoff is available","Repository freshness signal is available","Registry match score 27"],"urls":{"web":"https://www.openagentskill.com/skills/dfir-iris-iris-web","api":"https://www.openagentskill.com/api/agent/skills/dfir-iris-iris-web","install_api":"https://www.openagentskill.com/api/skills/dfir-iris-iris-web/install","audit":"https://www.openagentskill.com/skills/dfir-iris-iris-web/audit","repository":"https://github.com/dfir-iris/iris-web"}},{"rank":5,"match_type":"related","match_score":27,"raw_match_score":294.3,"semantic_relevance":54,"ranking_signals":{"retrieval":258,"semantic":54,"quality":14.3,"projectPopularity":16,"verifiedOutcomes":0,"verifiedSource":6},"slug":"thehive-project-cortex","name":"Cortex","description":"Cortex: a Powerful Observable Analysis and Active Response Engine","tagline":"Cortex: a Powerful Observable Analysis and Active Response Engine","category":"devops","tags":["incident-response","reliability","devops","analysis","analyzer","api","cortex","cyber-threat-intelligence","dfir","digital-forensics"],"author":{"name":"TheHive-Project","verified":true,"url":"https://github.com/TheHive-Project"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"TheHive-Project/Cortex","creatorName":"TheHive-Project","creatorUrl":"https://github.com/TheHive-Project","sourceUrl":"https://github.com/TheHive-Project/Cortex","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/thehive-project-cortex#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":1585,"forks":258,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":57.1},"quality":{"score":87,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"1.6K","tone":"positive"},{"label":"Freshness","value":"4mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"AGPL-3.0","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":83,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout.","recommendedAction":"Test in a sandbox workflow and compare its install path with close alternatives.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"1.6K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":83,"weight":0.08,"status":"pass","detail":"1.6K stars, 258 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":76,"weight":0.14,"status":"info","detail":"4mo since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"AGPL-3.0"},{"id":"documentation","label":"README/SKILL.md completeness","score":50,"weight":0.14,"status":"warn","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":82,"weight":0.12,"status":"pass","detail":"network or browser surface"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add TheHive-Project/Cortex"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":86,"weight":0.07,"status":"pass","detail":"network or browser access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/TheHive-Project/Cortex"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"1.6K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"1.6K stars, 258 forks; issue activity unavailable in current metadata"},{"status":"info","label":"Recent maintenance","detail":"4mo since push"},{"status":"pass","label":"License clarity","detail":"AGPL-3.0"},{"status":"warn","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"network or browser surface"},{"status":"pass","label":"Install availability","detail":"npx skills add TheHive-Project/Cortex"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"network or browser access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/TheHive-Project/Cortex"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"],"evidence":{"stars":"1.6K GitHub stars","repoActivity":"1.6K stars, 258 forks","lastPushed":"4mo since push","license":"AGPL-3.0","repository":"https://github.com/TheHive-Project/Cortex","install":"npx skills add TheHive-Project/Cortex","installSafety":"standard package or runtime install path","permissionSurface":"network or browser access","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add TheHive-Project/Cortex","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","4mo since push"]},"agentCompatibility":["Scala","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["devops","incident-response","reliability","analysis","analyzer","api"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety":{"score":72,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","summary":"Good audit and safety signals with no high-risk permission hints in public metadata.","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","auto_install_policy":"review","reasons":["Safe-to-try audit","72/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["Documentation summary is thin"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","reasons":["Safe-to-try audit","72/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"github-automation","title":"GitHub automation"},{"slug":"research-agents","title":"Research agents"},{"slug":"testing-qa","title":"Testing and QA"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","Scala"],"install":{"ready":true,"command":"npx skills add TheHive-Project/Cortex","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":1585,"starsLabel":"1.6K","forks":258,"license":"AGPL-3.0","qualityScore":87,"trustScore":83,"auditScore":84},"maintenance":{"status":"active","label":"4mo since push","daysSincePush":108,"lastPushedAt":"2026-05-20T09:50:25+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"coverageTags":["Coding","GitHub automation","devops","incident-response","reliability","analysis","analyzer","api"]},"audit":{"audit_score":84,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"decision":{"readiness_score":98,"readiness_label":"Production-ready","headline":"Primary pick for GitHub automation","role":"Primary pick","primary_fit":"GitHub automation","best_for":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one GitHub automation task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"thehive-project-cortex","name":"Cortex","description":"Cortex: a Powerful Observable Analysis and Active Response Engine","category":"devops","url":"https://www.openagentskill.com/skills/thehive-project-cortex","repository":"https://github.com/TheHive-Project/Cortex","github_repo":"TheHive-Project/Cortex"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Search sources","Extract claims"],"suited_agents":["Scala","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add TheHive-Project/Cortex","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add thehive-project-cortex"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Cortex\" agent skill from https://github.com/TheHive-Project/Cortex. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Cortex: a Powerful Observable Analysis and Active Response Engine After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"thehive-project-cortex\",\"task\":\"Install Cortex\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Cortex\" as a Claude Code skill from https://github.com/TheHive-Project/Cortex. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Cortex: a Powerful Observable Analysis and Active Response Engine After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"thehive-project-cortex\",\"task\":\"Install Cortex\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Cortex\" from https://github.com/TheHive-Project/Cortex into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Cortex: a Powerful Observable Analysis and Active Response Engine After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"thehive-project-cortex\",\"task\":\"Install Cortex\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/thehive-project-cortex/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/thehive-project-cortex"},"trust":{"score":83,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"1.6K GitHub stars","repoActivity":"1.6K stars, 258 forks","lastPushed":"4mo since push","license":"AGPL-3.0","repository":"https://github.com/TheHive-Project/Cortex","install":"npx skills add TheHive-Project/Cortex","installSafety":"standard package or runtime install path","permissionSurface":"network or browser access","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","analysis","analyzer","api"],"known_risks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":84,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":87,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"4mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"agent_contract":{"task_input":"Use Cortex in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 83/100 Strong shortlist","Audit: 84/100 Safe to try","Safety: 72/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"thehive-project-cortex (Cortex)","install_command":"npx skills add TheHive-Project/Cortex","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"thehive-project-cortex","task":"Use Cortex in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/thehive-project-cortex","api":"https://www.openagentskill.com/api/agent/skills/thehive-project-cortex","audit":"https://www.openagentskill.com/skills/thehive-project-cortex/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=thehive-project-cortex&task=Use%20Cortex%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Cortex%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Cortex%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/thehive-project-cortex/install","manifest":"https://www.openagentskill.com/api/registry/manifest/thehive-project-cortex"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"thehive-project-cortex","name":"Cortex","description":"Cortex: a Powerful Observable Analysis and Active Response Engine","category":"devops","url":"https://www.openagentskill.com/skills/thehive-project-cortex","repository":"https://github.com/TheHive-Project/Cortex","github_repo":"TheHive-Project/Cortex"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Search sources","Extract claims"],"suited_agents":["Scala","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add TheHive-Project/Cortex","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add thehive-project-cortex"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Cortex\" agent skill from https://github.com/TheHive-Project/Cortex. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Cortex: a Powerful Observable Analysis and Active Response Engine After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"thehive-project-cortex\",\"task\":\"Install Cortex\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Cortex\" as a Claude Code skill from https://github.com/TheHive-Project/Cortex. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Cortex: a Powerful Observable Analysis and Active Response Engine After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"thehive-project-cortex\",\"task\":\"Install Cortex\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Cortex\" from https://github.com/TheHive-Project/Cortex into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Cortex: a Powerful Observable Analysis and Active Response Engine After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"thehive-project-cortex\",\"task\":\"Install Cortex\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/thehive-project-cortex/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/thehive-project-cortex"},"trust":{"score":83,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"1.6K GitHub stars","repoActivity":"1.6K stars, 258 forks","lastPushed":"4mo since push","license":"AGPL-3.0","repository":"https://github.com/TheHive-Project/Cortex","install":"npx skills add TheHive-Project/Cortex","installSafety":"standard package or runtime install path","permissionSurface":"network or browser access","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","analysis","analyzer","api"],"known_risks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":84,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":87,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"4mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"agent_contract":{"task_input":"Use Cortex in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 83/100 Strong shortlist","Audit: 84/100 Safe to try","Safety: 72/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"thehive-project-cortex (Cortex)","install_command":"npx skills add TheHive-Project/Cortex","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"thehive-project-cortex","task":"Use Cortex in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/thehive-project-cortex","api":"https://www.openagentskill.com/api/agent/skills/thehive-project-cortex","audit":"https://www.openagentskill.com/skills/thehive-project-cortex/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=thehive-project-cortex&task=Use%20Cortex%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Cortex%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Cortex%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/thehive-project-cortex/install","manifest":"https://www.openagentskill.com/api/registry/manifest/thehive-project-cortex"}},"platforms":["Scala","Incident Response"],"use_cases":[{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"research-agents","title":"Research agents","url":"https://www.openagentskill.com/use-cases/research-agents"},{"slug":"testing-qa","title":"Testing and QA","url":"https://www.openagentskill.com/use-cases/testing-qa"},{"slug":"web-scraping","title":"Web scraping","url":"https://www.openagentskill.com/use-cases/web-scraping"}],"install":"npx skills add TheHive-Project/Cortex","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add thehive-project-cortex","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Cortex\" agent skill from https://github.com/TheHive-Project/Cortex. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Cortex: a Powerful Observable Analysis and Active Response Engine After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"thehive-project-cortex\",\"task\":\"Install Cortex\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Cortex\" as a Claude Code skill from https://github.com/TheHive-Project/Cortex. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Cortex: a Powerful Observable Analysis and Active Response Engine After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"thehive-project-cortex\",\"task\":\"Install Cortex\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Cortex\" from https://github.com/TheHive-Project/Cortex into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Cortex: a Powerful Observable Analysis and Active Response Engine After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"thehive-project-cortex\",\"task\":\"Install Cortex\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/TheHive-Project/Cortex","github_repo":"TheHive-Project/Cortex","version":"1.0.0","license":"AGPL-3.0","updated_at":"2026-09-01T11:59:28.941454+00:00","canonical_key":"thehive-project/cortex","recommendation_reasons":["Matches task terms: incident, response, digital, forensics","Useful GitHub adoption: 1,585 stars","Install handoff is available","Repository freshness signal is available","Registry match score 27"],"urls":{"web":"https://www.openagentskill.com/skills/thehive-project-cortex","api":"https://www.openagentskill.com/api/agent/skills/thehive-project-cortex","install_api":"https://www.openagentskill.com/api/skills/thehive-project-cortex/install","audit":"https://www.openagentskill.com/skills/thehive-project-cortex/audit","repository":"https://github.com/TheHive-Project/Cortex"}},{"rank":6,"match_type":"related","match_score":25,"raw_match_score":273.2,"semantic_relevance":54,"ranking_signals":{"retrieval":234,"semantic":54,"quality":15.8,"projectPopularity":17.5,"verifiedOutcomes":0,"verifiedSource":6},"slug":"sleuthkit-sleuthkit","name":"Sleuthkit","description":"The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. ","tagline":"The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. ","category":"devops","tags":["incident-response","reliability","devops","forensics","ntfs","sleuthkit","tct","c","github"],"author":{"name":"sleuthkit","verified":true,"url":"https://github.com/sleuthkit"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"sleuthkit/sleuthkit","creatorName":"sleuthkit","creatorUrl":"https://github.com/sleuthkit","sourceUrl":"https://github.com/sleuthkit/sleuthkit","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/sleuthkit-sleuthkit#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":3093,"forks":693,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":63.13},"quality":{"score":95,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"3.1K","tone":"positive"},{"label":"Freshness","value":"3mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Unknown","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":82,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout.","recommendedAction":"Test in a sandbox workflow and compare its install path with close alternatives.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"3.1K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":83,"weight":0.08,"status":"pass","detail":"3.1K stars, 693 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":88,"weight":0.14,"status":"pass","detail":"3mo since push"},{"id":"license","label":"License clarity","score":42,"weight":0.09,"status":"warn","detail":"Unknown"},{"id":"documentation","label":"README/SKILL.md completeness","score":66,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add sleuthkit/sleuthkit"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":62,"weight":0.07,"status":"info","detail":"shell or command execution, filesystem or document access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/sleuthkit/sleuthkit"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"3.1K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"3.1K stars, 693 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"3mo since push"},{"status":"warn","label":"License clarity","detail":"Unknown"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add sleuthkit/sleuthkit"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"info","label":"Permission surface","detail":"shell or command execution, filesystem or document access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/sleuthkit/sleuthkit"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown"],"evidence":{"stars":"3.1K GitHub stars","repoActivity":"3.1K stars, 693 forks","lastPushed":"3mo since push","license":"Unknown","repository":"https://github.com/sleuthkit/sleuthkit","install":"npx skills add sleuthkit/sleuthkit","installSafety":"standard package or runtime install path","permissionSurface":"shell or command execution, filesystem or document access","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add sleuthkit/sleuthkit","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is unclear","No Agent Proven outcome evidence yet","3mo since push"]},"agentCompatibility":["C","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["devops","incident-response","reliability","forensics","ntfs","sleuthkit"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace","Commercial reuse before clarifying license terms"],"knownRisks":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"safety":{"score":59,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","summary":"Usable candidate, but the agent should surface permission and audit notes before installation.","recommended_action":"Require human approval before installing into a real workspace.","auto_install_policy":"review","reasons":["High-risk permission hints: Shell or command execution","59/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"shell","label":"Shell or command execution","reason":"Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.","severity":"high"},{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"}],"policy_warnings":["High-risk permission hints: Shell or command execution","License is unclear"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace.","reasons":["High-risk permission hints: Shell or command execution","59/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"github-automation","title":"GitHub automation"},{"slug":"coding-agents","title":"Coding agents"},{"slug":"workflow-automation","title":"Workflow automation"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","C"],"install":{"ready":true,"command":"npx skills add sleuthkit/sleuthkit","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":3093,"starsLabel":"3.1K","forks":693,"license":"Unknown","qualityScore":95,"trustScore":82,"auditScore":87},"maintenance":{"status":"active","label":"3mo since push","daysSincePush":85,"lastPushedAt":"2026-06-12T18:34:26+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"coverageTags":["Coding","GitHub automation","devops","incident-response","reliability","forensics","ntfs","sleuthkit"]},"audit":{"audit_score":87,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for GitHub automation","role":"Primary pick","primary_fit":"GitHub automation","best_for":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one GitHub automation task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"sleuthkit-sleuthkit","name":"Sleuthkit","description":"The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. ","category":"devops","url":"https://www.openagentskill.com/skills/sleuthkit-sleuthkit","repository":"https://github.com/sleuthkit/sleuthkit","github_repo":"sleuthkit/sleuthkit"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Inspect source files","Explain architecture"],"suited_agents":["C","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add sleuthkit/sleuthkit","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add sleuthkit-sleuthkit"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Sleuthkit\" agent skill from https://github.com/sleuthkit/sleuthkit. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"sleuthkit-sleuthkit\",\"task\":\"Install Sleuthkit\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Sleuthkit\" as a Claude Code skill from https://github.com/sleuthkit/sleuthkit. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"sleuthkit-sleuthkit\",\"task\":\"Install Sleuthkit\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Sleuthkit\" from https://github.com/sleuthkit/sleuthkit into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"sleuthkit-sleuthkit\",\"task\":\"Install Sleuthkit\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/sleuthkit-sleuthkit/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/sleuthkit-sleuthkit"},"trust":{"score":82,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"3.1K GitHub stars","repoActivity":"3.1K stars, 693 forks","lastPushed":"3mo since push","license":"Unknown","repository":"https://github.com/sleuthkit/sleuthkit","install":"npx skills add sleuthkit/sleuthkit","installSafety":"standard package or runtime install path","permissionSurface":"shell or command execution, filesystem or document access","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","forensics","ntfs","sleuthkit"],"known_risks":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":87,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":95,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","High-risk permission hints: Shell or command execution","License is unclear","Documentation summary is thin","License clarity: Unknown","Production credentials, payments, or irreversible account changes without explicit human review"],"agent_contract":{"task_input":"Use Sleuthkit in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 82/100 Strong shortlist","Audit: 87/100 Safe to try","Safety: 59/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"sleuthkit-sleuthkit (Sleuthkit)","install_command":"npx skills add sleuthkit/sleuthkit","risk_summary":"Safe to try; Reviewed with permission notes; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"sleuthkit-sleuthkit","task":"Use Sleuthkit in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/sleuthkit-sleuthkit","api":"https://www.openagentskill.com/api/agent/skills/sleuthkit-sleuthkit","audit":"https://www.openagentskill.com/skills/sleuthkit-sleuthkit/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=sleuthkit-sleuthkit&task=Use%20Sleuthkit%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Sleuthkit%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Sleuthkit%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/sleuthkit-sleuthkit/install","manifest":"https://www.openagentskill.com/api/registry/manifest/sleuthkit-sleuthkit"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"sleuthkit-sleuthkit","name":"Sleuthkit","description":"The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. ","category":"devops","url":"https://www.openagentskill.com/skills/sleuthkit-sleuthkit","repository":"https://github.com/sleuthkit/sleuthkit","github_repo":"sleuthkit/sleuthkit"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Inspect source files","Explain architecture"],"suited_agents":["C","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add sleuthkit/sleuthkit","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add sleuthkit-sleuthkit"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Sleuthkit\" agent skill from https://github.com/sleuthkit/sleuthkit. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"sleuthkit-sleuthkit\",\"task\":\"Install Sleuthkit\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Sleuthkit\" as a Claude Code skill from https://github.com/sleuthkit/sleuthkit. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"sleuthkit-sleuthkit\",\"task\":\"Install Sleuthkit\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Sleuthkit\" from https://github.com/sleuthkit/sleuthkit into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"sleuthkit-sleuthkit\",\"task\":\"Install Sleuthkit\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/sleuthkit-sleuthkit/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/sleuthkit-sleuthkit"},"trust":{"score":82,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"3.1K GitHub stars","repoActivity":"3.1K stars, 693 forks","lastPushed":"3mo since push","license":"Unknown","repository":"https://github.com/sleuthkit/sleuthkit","install":"npx skills add sleuthkit/sleuthkit","installSafety":"standard package or runtime install path","permissionSurface":"shell or command execution, filesystem or document access","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","forensics","ntfs","sleuthkit"],"known_risks":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":87,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":95,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","High-risk permission hints: Shell or command execution","License is unclear","Documentation summary is thin","License clarity: Unknown","Production credentials, payments, or irreversible account changes without explicit human review"],"agent_contract":{"task_input":"Use Sleuthkit in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 82/100 Strong shortlist","Audit: 87/100 Safe to try","Safety: 59/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"sleuthkit-sleuthkit (Sleuthkit)","install_command":"npx skills add sleuthkit/sleuthkit","risk_summary":"Safe to try; Reviewed with permission notes; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"sleuthkit-sleuthkit","task":"Use Sleuthkit in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/sleuthkit-sleuthkit","api":"https://www.openagentskill.com/api/agent/skills/sleuthkit-sleuthkit","audit":"https://www.openagentskill.com/skills/sleuthkit-sleuthkit/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=sleuthkit-sleuthkit&task=Use%20Sleuthkit%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Sleuthkit%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Sleuthkit%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/sleuthkit-sleuthkit/install","manifest":"https://www.openagentskill.com/api/registry/manifest/sleuthkit-sleuthkit"}},"platforms":["C","Incident Response"],"use_cases":[{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"workflow-automation","title":"Workflow automation","url":"https://www.openagentskill.com/use-cases/workflow-automation"},{"slug":"testing-qa","title":"Testing and QA","url":"https://www.openagentskill.com/use-cases/testing-qa"}],"install":"npx skills add sleuthkit/sleuthkit","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add sleuthkit-sleuthkit","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Sleuthkit\" agent skill from https://github.com/sleuthkit/sleuthkit. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"sleuthkit-sleuthkit\",\"task\":\"Install Sleuthkit\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Sleuthkit\" as a Claude Code skill from https://github.com/sleuthkit/sleuthkit. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"sleuthkit-sleuthkit\",\"task\":\"Install Sleuthkit\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Sleuthkit\" from https://github.com/sleuthkit/sleuthkit into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"sleuthkit-sleuthkit\",\"task\":\"Install Sleuthkit\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/sleuthkit/sleuthkit","github_repo":"sleuthkit/sleuthkit","version":"1.0.0","license":"Unknown","updated_at":"2026-09-01T11:59:28.941454+00:00","canonical_key":"sleuthkit/sleuthkit","recommendation_reasons":["Matches task terms: incident, response, digital, forensics","Useful GitHub adoption: 3,093 stars","Install handoff is available","Repository freshness signal is available","Registry match score 25"],"urls":{"web":"https://www.openagentskill.com/skills/sleuthkit-sleuthkit","api":"https://www.openagentskill.com/api/agent/skills/sleuthkit-sleuthkit","install_api":"https://www.openagentskill.com/api/skills/sleuthkit-sleuthkit/install","audit":"https://www.openagentskill.com/skills/sleuthkit-sleuthkit/audit","repository":"https://github.com/sleuthkit/sleuthkit"}},{"rank":7,"match_type":"related","match_score":24,"raw_match_score":265.3,"semantic_relevance":54,"ranking_signals":{"retrieval":226,"semantic":54,"quality":15.8,"projectPopularity":17.5,"verifiedOutcomes":0,"verifiedSource":6},"slug":"yamato-security-hayabusa","name":"Hayabusa","description":"Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.","tagline":"Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.","category":"devops","tags":["incident-response","reliability","devops","attack","cybersecurity","detection","dfir","event","forensics","hayabusa"],"author":{"name":"Yamato-Security","verified":true,"url":"https://github.com/Yamato-Security"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"Yamato-Security/hayabusa","creatorName":"Yamato-Security","creatorUrl":"https://github.com/Yamato-Security","sourceUrl":"https://github.com/Yamato-Security/hayabusa","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/yamato-security-hayabusa#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":3204,"forks":273,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":63.24},"quality":{"score":94,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"3.2K","tone":"positive"},{"label":"Freshness","value":"3mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"AGPL-3.0","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":88,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"3.2K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":83,"weight":0.08,"status":"pass","detail":"3.2K stars, 273 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":88,"weight":0.14,"status":"pass","detail":"3mo since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"AGPL-3.0"},{"id":"documentation","label":"README/SKILL.md completeness","score":66,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add Yamato-Security/hayabusa"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":100,"weight":0.07,"status":"pass","detail":"no high-risk permission surface in public metadata"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/Yamato-Security/hayabusa"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"3.2K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"3.2K stars, 273 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"3mo since push"},{"status":"pass","label":"License clarity","detail":"AGPL-3.0"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add Yamato-Security/hayabusa"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"no high-risk permission surface in public metadata"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/Yamato-Security/hayabusa"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["Documentation summary is thin"],"evidence":{"stars":"3.2K GitHub stars","repoActivity":"3.2K stars, 273 forks","lastPushed":"3mo since push","license":"AGPL-3.0","repository":"https://github.com/Yamato-Security/hayabusa","install":"npx skills add Yamato-Security/hayabusa","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add Yamato-Security/hayabusa","policy":"agent_install_candidate","label":"Agent install candidate","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","3mo since push"]},"agentCompatibility":["Rust","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"low","label":"Low metadata risk","notes":["Documentation summary is thin"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":true,"sandboxRequired":true,"policy":"agent_install_candidate","reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"bestFor":["devops","incident-response","reliability","attack","cybersecurity","detection"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"knownRisks":["Documentation summary is thin"]},"safety":{"score":78,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","summary":"Good audit and safety signals with no high-risk permission hints in public metadata.","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","auto_install_policy":"review","reasons":["Safe-to-try audit","78/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["Documentation summary is thin"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","reasons":["Safe-to-try audit","78/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"github-automation","title":"GitHub automation"},{"slug":"testing-qa","title":"Testing and QA"},{"slug":"security-compliance","title":"Security and compliance"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","Rust"],"install":{"ready":true,"command":"npx skills add Yamato-Security/hayabusa","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":3204,"starsLabel":"3.2K","forks":273,"license":"AGPL-3.0","qualityScore":94,"trustScore":88,"auditScore":90},"maintenance":{"status":"active","label":"3mo since push","daysSincePush":90,"lastPushedAt":"2026-06-07T05:02:36+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["Documentation summary is thin"]},"coverageTags":["Coding","GitHub automation","devops","incident-response","reliability","attack","cybersecurity","detection"]},"audit":{"audit_score":90,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin"]},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for GitHub automation","role":"Primary pick","primary_fit":"GitHub automation","best_for":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one GitHub automation task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"yamato-security-hayabusa","name":"Hayabusa","description":"Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.","category":"devops","url":"https://www.openagentskill.com/skills/yamato-security-hayabusa","repository":"https://github.com/Yamato-Security/hayabusa","github_repo":"Yamato-Security/hayabusa"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Run test suites","Capture failures"],"suited_agents":["Rust","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add Yamato-Security/hayabusa","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add yamato-security-hayabusa"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Hayabusa\" agent skill from https://github.com/Yamato-Security/hayabusa. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"yamato-security-hayabusa\",\"task\":\"Install Hayabusa\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Hayabusa\" as a Claude Code skill from https://github.com/Yamato-Security/hayabusa. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"yamato-security-hayabusa\",\"task\":\"Install Hayabusa\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Hayabusa\" from https://github.com/Yamato-Security/hayabusa into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"yamato-security-hayabusa\",\"task\":\"Install Hayabusa\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/yamato-security-hayabusa/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/yamato-security-hayabusa"},"trust":{"score":88,"label":"Production candidate","version":"trust-score-v4","install_policy":"agent_install_candidate","evidence":{"stars":"3.2K GitHub stars","repoActivity":"3.2K stars, 273 forks","lastPushed":"3mo since push","license":"AGPL-3.0","repository":"https://github.com/Yamato-Security/hayabusa","install":"npx skills add Yamato-Security/hayabusa","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":true,"sandbox_required":true,"reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"best_for":["devops","incident-response","reliability","attack","cybersecurity","detection"],"known_risks":["Documentation summary is thin"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":90,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":94,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"agent_contract":{"task_input":"Use Hayabusa in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 88/100 Production candidate","Audit: 90/100 Safe to try","Safety: 78/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"yamato-security-hayabusa (Hayabusa)","install_command":"npx skills add Yamato-Security/hayabusa","risk_summary":"Safe to try; Reviewed; Low metadata risk","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"yamato-security-hayabusa","task":"Use Hayabusa in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/yamato-security-hayabusa","api":"https://www.openagentskill.com/api/agent/skills/yamato-security-hayabusa","audit":"https://www.openagentskill.com/skills/yamato-security-hayabusa/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=yamato-security-hayabusa&task=Use%20Hayabusa%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Hayabusa%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Hayabusa%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/yamato-security-hayabusa/install","manifest":"https://www.openagentskill.com/api/registry/manifest/yamato-security-hayabusa"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"yamato-security-hayabusa","name":"Hayabusa","description":"Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.","category":"devops","url":"https://www.openagentskill.com/skills/yamato-security-hayabusa","repository":"https://github.com/Yamato-Security/hayabusa","github_repo":"Yamato-Security/hayabusa"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Run test suites","Capture failures"],"suited_agents":["Rust","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add Yamato-Security/hayabusa","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add yamato-security-hayabusa"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Hayabusa\" agent skill from https://github.com/Yamato-Security/hayabusa. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"yamato-security-hayabusa\",\"task\":\"Install Hayabusa\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Hayabusa\" as a Claude Code skill from https://github.com/Yamato-Security/hayabusa. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"yamato-security-hayabusa\",\"task\":\"Install Hayabusa\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Hayabusa\" from https://github.com/Yamato-Security/hayabusa into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"yamato-security-hayabusa\",\"task\":\"Install Hayabusa\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/yamato-security-hayabusa/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/yamato-security-hayabusa"},"trust":{"score":88,"label":"Production candidate","version":"trust-score-v4","install_policy":"agent_install_candidate","evidence":{"stars":"3.2K GitHub stars","repoActivity":"3.2K stars, 273 forks","lastPushed":"3mo since push","license":"AGPL-3.0","repository":"https://github.com/Yamato-Security/hayabusa","install":"npx skills add Yamato-Security/hayabusa","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":true,"sandbox_required":true,"reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"best_for":["devops","incident-response","reliability","attack","cybersecurity","detection"],"known_risks":["Documentation summary is thin"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":90,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":94,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"agent_contract":{"task_input":"Use Hayabusa in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 88/100 Production candidate","Audit: 90/100 Safe to try","Safety: 78/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"yamato-security-hayabusa (Hayabusa)","install_command":"npx skills add Yamato-Security/hayabusa","risk_summary":"Safe to try; Reviewed; Low metadata risk","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"yamato-security-hayabusa","task":"Use Hayabusa in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/yamato-security-hayabusa","api":"https://www.openagentskill.com/api/agent/skills/yamato-security-hayabusa","audit":"https://www.openagentskill.com/skills/yamato-security-hayabusa/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=yamato-security-hayabusa&task=Use%20Hayabusa%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Hayabusa%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Hayabusa%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/yamato-security-hayabusa/install","manifest":"https://www.openagentskill.com/api/registry/manifest/yamato-security-hayabusa"}},"platforms":["Rust","Incident Response"],"use_cases":[{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"testing-qa","title":"Testing and QA","url":"https://www.openagentskill.com/use-cases/testing-qa"},{"slug":"security-compliance","title":"Security and compliance","url":"https://www.openagentskill.com/use-cases/security-compliance"},{"slug":"web-scraping","title":"Web scraping","url":"https://www.openagentskill.com/use-cases/web-scraping"}],"install":"npx skills add Yamato-Security/hayabusa","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add yamato-security-hayabusa","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Hayabusa\" agent skill from https://github.com/Yamato-Security/hayabusa. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"yamato-security-hayabusa\",\"task\":\"Install Hayabusa\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Hayabusa\" as a Claude Code skill from https://github.com/Yamato-Security/hayabusa. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"yamato-security-hayabusa\",\"task\":\"Install Hayabusa\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Hayabusa\" from https://github.com/Yamato-Security/hayabusa into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"yamato-security-hayabusa\",\"task\":\"Install Hayabusa\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/Yamato-Security/hayabusa","github_repo":"Yamato-Security/hayabusa","version":"1.0.0","license":"AGPL-3.0","updated_at":"2026-09-01T11:59:28.941454+00:00","canonical_key":"yamato-security/hayabusa","recommendation_reasons":["Matches task terms: incident, response, forensics","Useful GitHub adoption: 3,204 stars","Install handoff is available","Repository freshness signal is available","Registry match score 24"],"urls":{"web":"https://www.openagentskill.com/skills/yamato-security-hayabusa","api":"https://www.openagentskill.com/api/agent/skills/yamato-security-hayabusa","install_api":"https://www.openagentskill.com/api/skills/yamato-security-hayabusa/install","audit":"https://www.openagentskill.com/skills/yamato-security-hayabusa/audit","repository":"https://github.com/Yamato-Security/hayabusa"}},{"rank":8,"match_type":"related","match_score":24,"raw_match_score":262.9,"semantic_relevance":54,"ranking_signals":{"retrieval":226,"semantic":54,"quality":15.2,"projectPopularity":15.7,"verifiedOutcomes":0,"verifiedSource":6},"slug":"tclahr-uac","name":"Uac","description":"UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.","tagline":"UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.","category":"devops","tags":["incident-response","reliability","devops","aix","collector","computer-forensics","dfir","esxi","forensics","freebsd"],"author":{"name":"tclahr","verified":true,"url":"https://github.com/tclahr"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"tclahr/uac","creatorName":"tclahr","creatorUrl":"https://github.com/tclahr","sourceUrl":"https://github.com/tclahr/uac","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/tclahr-uac#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":1379,"forks":192,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":60.68},"quality":{"score":97,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"1.4K","tone":"positive"},{"label":"Freshness","value":"3mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Apache-2.0","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":82,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout.","recommendedAction":"Test in a sandbox workflow and compare its install path with close alternatives.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"1.4K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":77,"weight":0.08,"status":"info","detail":"1.4K stars, 192 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":76,"weight":0.14,"status":"info","detail":"3mo since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"Apache-2.0"},{"id":"documentation","label":"README/SKILL.md completeness","score":66,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":72,"weight":0.12,"status":"info","detail":"command execution surface"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add tclahr/uac"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":76,"weight":0.07,"status":"info","detail":"shell or command execution"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/tclahr/uac"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"1.4K GitHub stars"},{"status":"info","label":"Stars/forks activity","detail":"1.4K stars, 192 forks; issue activity unavailable in current metadata"},{"status":"info","label":"Recent maintenance","detail":"3mo since push"},{"status":"pass","label":"License clarity","detail":"Apache-2.0"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"info","label":"Dependency/runtime risk","detail":"command execution surface"},{"status":"pass","label":"Install availability","detail":"npx skills add tclahr/uac"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"info","label":"Permission surface","detail":"shell or command execution"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/tclahr/uac"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["Documentation summary is thin"],"evidence":{"stars":"1.4K GitHub stars","repoActivity":"1.4K stars, 192 forks","lastPushed":"3mo since push","license":"Apache-2.0","repository":"https://github.com/tclahr/uac","install":"npx skills add tclahr/uac","installSafety":"standard package or runtime install path","permissionSurface":"shell or command execution","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add tclahr/uac","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","3mo since push"]},"agentCompatibility":["Shell","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"low","label":"Low metadata risk","notes":["Documentation summary is thin"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["devops","incident-response","reliability","aix","collector","computer-forensics"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["Documentation summary is thin"]},"safety":{"score":63,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","summary":"Usable candidate, but the agent should surface permission and audit notes before installation.","recommended_action":"Require human approval before installing into a real workspace.","auto_install_policy":"review","reasons":["High-risk permission hints: Shell or command execution","63/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"shell","label":"Shell or command execution","reason":"Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.","severity":"high"},{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["High-risk permission hints: Shell or command execution","Documentation summary is thin"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace.","reasons":["High-risk permission hints: Shell or command execution","63/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"design-creative","title":"Design and creative"},{"slug":"github-automation","title":"GitHub automation"},{"slug":"testing-qa","title":"Testing and QA"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","Shell"],"install":{"ready":true,"command":"npx skills add tclahr/uac","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":1379,"starsLabel":"1.4K","forks":192,"license":"Apache-2.0","qualityScore":97,"trustScore":82,"auditScore":87},"maintenance":{"status":"active","label":"3mo since push","daysSincePush":100,"lastPushedAt":"2026-05-28T11:49:04+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["Documentation summary is thin"]},"coverageTags":["Coding","GitHub automation","devops","incident-response","reliability","aix","collector","computer-forensics"]},"audit":{"audit_score":87,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin"]},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Design and creative","role":"Primary pick","primary_fit":"Design and creative","best_for":["Design and creative workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one Design and creative task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"tclahr-uac","name":"Uac","description":"UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.","category":"devops","url":"https://www.openagentskill.com/skills/tclahr-uac","repository":"https://github.com/tclahr/uac","github_repo":"tclahr/uac"},"suited_tasks":["Design and creative workflows","general agent builders","teams that value GitHub adoption signals","Inspect visual requirements","Generate reusable assets","Package output for review","Inspect repository metadata","Compare code changes"],"suited_agents":["Shell","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add tclahr/uac","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add tclahr-uac"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Uac\" agent skill from https://github.com/tclahr/uac. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"tclahr-uac\",\"task\":\"Install Uac\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Uac\" as a Claude Code skill from https://github.com/tclahr/uac. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"tclahr-uac\",\"task\":\"Install Uac\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Uac\" from https://github.com/tclahr/uac into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"tclahr-uac\",\"task\":\"Install Uac\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/tclahr-uac/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/tclahr-uac"},"trust":{"score":82,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"1.4K GitHub stars","repoActivity":"1.4K stars, 192 forks","lastPushed":"3mo since push","license":"Apache-2.0","repository":"https://github.com/tclahr/uac","install":"npx skills add tclahr/uac","installSafety":"standard package or runtime install path","permissionSurface":"shell or command execution","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","aix","collector","computer-forensics"],"known_risks":["Documentation summary is thin"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":87,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":97,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","High-risk permission hints: Shell or command execution","Documentation summary is thin","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"agent_contract":{"task_input":"Use Uac in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 82/100 Strong shortlist","Audit: 87/100 Safe to try","Safety: 63/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"tclahr-uac (Uac)","install_command":"npx skills add tclahr/uac","risk_summary":"Safe to try; Reviewed with permission notes; Low metadata risk","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"tclahr-uac","task":"Use Uac in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/tclahr-uac","api":"https://www.openagentskill.com/api/agent/skills/tclahr-uac","audit":"https://www.openagentskill.com/skills/tclahr-uac/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=tclahr-uac&task=Use%20Uac%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Uac%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Uac%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/tclahr-uac/install","manifest":"https://www.openagentskill.com/api/registry/manifest/tclahr-uac"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"tclahr-uac","name":"Uac","description":"UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.","category":"devops","url":"https://www.openagentskill.com/skills/tclahr-uac","repository":"https://github.com/tclahr/uac","github_repo":"tclahr/uac"},"suited_tasks":["Design and creative workflows","general agent builders","teams that value GitHub adoption signals","Inspect visual requirements","Generate reusable assets","Package output for review","Inspect repository metadata","Compare code changes"],"suited_agents":["Shell","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add tclahr/uac","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add tclahr-uac"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Uac\" agent skill from https://github.com/tclahr/uac. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"tclahr-uac\",\"task\":\"Install Uac\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Uac\" as a Claude Code skill from https://github.com/tclahr/uac. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"tclahr-uac\",\"task\":\"Install Uac\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Uac\" from https://github.com/tclahr/uac into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"tclahr-uac\",\"task\":\"Install Uac\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/tclahr-uac/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/tclahr-uac"},"trust":{"score":82,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"1.4K GitHub stars","repoActivity":"1.4K stars, 192 forks","lastPushed":"3mo since push","license":"Apache-2.0","repository":"https://github.com/tclahr/uac","install":"npx skills add tclahr/uac","installSafety":"standard package or runtime install path","permissionSurface":"shell or command execution","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","aix","collector","computer-forensics"],"known_risks":["Documentation summary is thin"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":87,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":97,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","High-risk permission hints: Shell or command execution","Documentation summary is thin","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"agent_contract":{"task_input":"Use Uac in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 82/100 Strong shortlist","Audit: 87/100 Safe to try","Safety: 63/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"tclahr-uac (Uac)","install_command":"npx skills add tclahr/uac","risk_summary":"Safe to try; Reviewed with permission notes; Low metadata risk","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"tclahr-uac","task":"Use Uac in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/tclahr-uac","api":"https://www.openagentskill.com/api/agent/skills/tclahr-uac","audit":"https://www.openagentskill.com/skills/tclahr-uac/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=tclahr-uac&task=Use%20Uac%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Uac%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Uac%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/tclahr-uac/install","manifest":"https://www.openagentskill.com/api/registry/manifest/tclahr-uac"}},"platforms":["Shell","Incident Response"],"use_cases":[{"slug":"design-creative","title":"Design and creative","url":"https://www.openagentskill.com/use-cases/design-creative"},{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"testing-qa","title":"Testing and QA","url":"https://www.openagentskill.com/use-cases/testing-qa"},{"slug":"security-compliance","title":"Security and compliance","url":"https://www.openagentskill.com/use-cases/security-compliance"}],"install":"npx skills add tclahr/uac","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add tclahr-uac","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Uac\" agent skill from https://github.com/tclahr/uac. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"tclahr-uac\",\"task\":\"Install Uac\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Uac\" as a Claude Code skill from https://github.com/tclahr/uac. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"tclahr-uac\",\"task\":\"Install Uac\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Uac\" from https://github.com/tclahr/uac into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"tclahr-uac\",\"task\":\"Install Uac\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/tclahr/uac","github_repo":"tclahr/uac","version":"1.0.0","license":"Apache-2.0","updated_at":"2026-09-01T11:59:28.941454+00:00","canonical_key":"tclahr/uac","recommendation_reasons":["Matches task terms: incident, response, forensics","Useful GitHub adoption: 1,379 stars","Install handoff is available","Repository freshness signal is available","Registry match score 24"],"urls":{"web":"https://www.openagentskill.com/skills/tclahr-uac","api":"https://www.openagentskill.com/api/agent/skills/tclahr-uac","install_api":"https://www.openagentskill.com/api/skills/tclahr-uac/install","audit":"https://www.openagentskill.com/skills/tclahr-uac/audit","repository":"https://github.com/tclahr/uac"}},{"rank":9,"match_type":"related","match_score":21,"raw_match_score":234.2,"semantic_relevance":42,"ranking_signals":{"retrieval":194,"semantic":42,"quality":16,"projectPopularity":18.2,"verifiedOutcomes":0,"verifiedSource":6},"slug":"a-poc-blueteam-tools","name":"BlueTeam Tools","description":"Tools and Techniques for Blue Team / Incident Response","tagline":"Tools and Techniques for Blue Team / Incident Response","category":"devops","tags":["incident-response","reliability","devops","blue-team","blueteam","cheatsheet","cyber-security","defender","incident","malware-analysis"],"author":{"name":"A-poc","verified":true,"url":"https://github.com/A-poc"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"A-poc/BlueTeam-Tools","creatorName":"A-poc","creatorUrl":"https://github.com/A-poc","sourceUrl":"https://github.com/A-poc/BlueTeam-Tools","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/a-poc-blueteam-tools#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":4312,"forks":666,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":64.14},"quality":{"score":91,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"4.3K","tone":"positive"},{"label":"Freshness","value":"2mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Unknown","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":82,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout.","recommendedAction":"Test in a sandbox workflow and compare its install path with close alternatives.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"4.3K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":83,"weight":0.08,"status":"pass","detail":"4.3K stars, 666 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":88,"weight":0.14,"status":"pass","detail":"2mo since push"},{"id":"license","label":"License clarity","score":42,"weight":0.09,"status":"warn","detail":"Unknown"},{"id":"documentation","label":"README/SKILL.md completeness","score":50,"weight":0.14,"status":"warn","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add A-poc/BlueTeam-Tools"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":100,"weight":0.07,"status":"pass","detail":"no high-risk permission surface in public metadata"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/A-poc/BlueTeam-Tools"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"4.3K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"4.3K stars, 666 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"2mo since push"},{"status":"warn","label":"License clarity","detail":"Unknown"},{"status":"warn","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add A-poc/BlueTeam-Tools"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"no high-risk permission surface in public metadata"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/A-poc/BlueTeam-Tools"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"],"evidence":{"stars":"4.3K GitHub stars","repoActivity":"4.3K stars, 666 forks","lastPushed":"2mo since push","license":"Unknown","repository":"https://github.com/A-poc/BlueTeam-Tools","install":"npx skills add A-poc/BlueTeam-Tools","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add A-poc/BlueTeam-Tools","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is unclear","No Agent Proven outcome evidence yet","2mo since push"]},"agentCompatibility":["Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["devops","incident-response","reliability","blue-team","blueteam","cheatsheet"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace","Commercial reuse before clarifying license terms"],"knownRisks":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety":{"score":74,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","summary":"Usable candidate, but the agent should surface permission and audit notes before installation.","recommended_action":"Require human approval before installing into a real workspace.","auto_install_policy":"review","reasons":["License is unclear","74/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"needs_review","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["License is unclear"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace.","reasons":["License is unclear","74/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"research-agents","title":"Research agents"},{"slug":"sports-analytics","title":"Sports analytics"},{"slug":"github-automation","title":"GitHub automation"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","Incident Response"],"install":{"ready":true,"command":"npx skills add A-poc/BlueTeam-Tools","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":4312,"starsLabel":"4.3K","forks":666,"license":"Unknown","qualityScore":91,"trustScore":82,"auditScore":86},"maintenance":{"status":"active","label":"2mo since push","daysSincePush":57,"lastPushedAt":"2026-07-10T22:22:57+00:00"},"risk":{"level":"needs_review","label":"Needs review","requiresReview":true,"notes":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Needs review"]},"coverageTags":["Coding","GitHub automation","devops","incident-response","reliability","blue-team","blueteam","cheatsheet"]},"audit":{"audit_score":86,"risk_level":"needs_review","risk_label":"Needs review","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Research agents","role":"Primary pick","primary_fit":"Research agents","best_for":["Research agents workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one Research agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"a-poc-blueteam-tools","name":"BlueTeam Tools","description":"Tools and Techniques for Blue Team / Incident Response","category":"devops","url":"https://www.openagentskill.com/skills/a-poc-blueteam-tools","repository":"https://github.com/A-poc/BlueTeam-Tools","github_repo":"A-poc/BlueTeam-Tools"},"suited_tasks":["Research agents workflows","general agent builders","teams that value GitHub adoption signals","Search sources","Extract claims","Synthesize findings","Load football datasets","Compare teams and players"],"suited_agents":["Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add A-poc/BlueTeam-Tools","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add a-poc-blueteam-tools"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"BlueTeam Tools\" agent skill from https://github.com/A-poc/BlueTeam-Tools. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Tools and Techniques for Blue Team / Incident Response After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"a-poc-blueteam-tools\",\"task\":\"Install BlueTeam Tools\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"BlueTeam Tools\" as a Claude Code skill from https://github.com/A-poc/BlueTeam-Tools. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Tools and Techniques for Blue Team / Incident Response After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"a-poc-blueteam-tools\",\"task\":\"Install BlueTeam Tools\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"BlueTeam Tools\" from https://github.com/A-poc/BlueTeam-Tools into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Tools and Techniques for Blue Team / Incident Response After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"a-poc-blueteam-tools\",\"task\":\"Install BlueTeam Tools\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/a-poc-blueteam-tools/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/a-poc-blueteam-tools"},"trust":{"score":82,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"4.3K GitHub stars","repoActivity":"4.3K stars, 666 forks","lastPushed":"2mo since push","license":"Unknown","repository":"https://github.com/A-poc/BlueTeam-Tools","install":"npx skills add A-poc/BlueTeam-Tools","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","blue-team","blueteam","cheatsheet"],"known_risks":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":86,"risk_level":"needs_review","risk_label":"Needs review","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":91,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"2mo since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review"],"agent_contract":{"task_input":"Use BlueTeam Tools in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 82/100 Strong shortlist","Audit: 86/100 Needs review","Safety: 74/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"a-poc-blueteam-tools (BlueTeam Tools)","install_command":"npx skills add A-poc/BlueTeam-Tools","risk_summary":"Needs review; Reviewed with permission notes; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"a-poc-blueteam-tools","task":"Use BlueTeam Tools in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/a-poc-blueteam-tools","api":"https://www.openagentskill.com/api/agent/skills/a-poc-blueteam-tools","audit":"https://www.openagentskill.com/skills/a-poc-blueteam-tools/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=a-poc-blueteam-tools&task=Use%20BlueTeam%20Tools%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20BlueTeam%20Tools%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20BlueTeam%20Tools%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/a-poc-blueteam-tools/install","manifest":"https://www.openagentskill.com/api/registry/manifest/a-poc-blueteam-tools"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"a-poc-blueteam-tools","name":"BlueTeam Tools","description":"Tools and Techniques for Blue Team / Incident Response","category":"devops","url":"https://www.openagentskill.com/skills/a-poc-blueteam-tools","repository":"https://github.com/A-poc/BlueTeam-Tools","github_repo":"A-poc/BlueTeam-Tools"},"suited_tasks":["Research agents workflows","general agent builders","teams that value GitHub adoption signals","Search sources","Extract claims","Synthesize findings","Load football datasets","Compare teams and players"],"suited_agents":["Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add A-poc/BlueTeam-Tools","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add a-poc-blueteam-tools"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"BlueTeam Tools\" agent skill from https://github.com/A-poc/BlueTeam-Tools. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Tools and Techniques for Blue Team / Incident Response After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"a-poc-blueteam-tools\",\"task\":\"Install BlueTeam Tools\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"BlueTeam Tools\" as a Claude Code skill from https://github.com/A-poc/BlueTeam-Tools. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Tools and Techniques for Blue Team / Incident Response After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"a-poc-blueteam-tools\",\"task\":\"Install BlueTeam Tools\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"BlueTeam Tools\" from https://github.com/A-poc/BlueTeam-Tools into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Tools and Techniques for Blue Team / Incident Response After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"a-poc-blueteam-tools\",\"task\":\"Install BlueTeam Tools\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/a-poc-blueteam-tools/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/a-poc-blueteam-tools"},"trust":{"score":82,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"4.3K GitHub stars","repoActivity":"4.3K stars, 666 forks","lastPushed":"2mo since push","license":"Unknown","repository":"https://github.com/A-poc/BlueTeam-Tools","install":"npx skills add A-poc/BlueTeam-Tools","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["devops","incident-response","reliability","blue-team","blueteam","cheatsheet"],"known_risks":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":86,"risk_level":"needs_review","risk_label":"Needs review","warnings":["License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace."},"quality":{"score":91,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"2mo since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","License is unclear","Documentation summary is thin","License clarity: Unknown","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review"],"agent_contract":{"task_input":"Use BlueTeam Tools in an agent workflow","recommended_action":"Require human approval before installing into a real workspace.","install_policy":"review","minimum_review_before_use":["Trust: 82/100 Strong shortlist","Audit: 86/100 Needs review","Safety: 74/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"a-poc-blueteam-tools (BlueTeam Tools)","install_command":"npx skills add A-poc/BlueTeam-Tools","risk_summary":"Needs review; Reviewed with permission notes; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"a-poc-blueteam-tools","task":"Use BlueTeam Tools in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/a-poc-blueteam-tools","api":"https://www.openagentskill.com/api/agent/skills/a-poc-blueteam-tools","audit":"https://www.openagentskill.com/skills/a-poc-blueteam-tools/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=a-poc-blueteam-tools&task=Use%20BlueTeam%20Tools%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20BlueTeam%20Tools%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20BlueTeam%20Tools%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/a-poc-blueteam-tools/install","manifest":"https://www.openagentskill.com/api/registry/manifest/a-poc-blueteam-tools"}},"platforms":["Incident Response"],"use_cases":[{"slug":"research-agents","title":"Research agents","url":"https://www.openagentskill.com/use-cases/research-agents"},{"slug":"sports-analytics","title":"Sports analytics","url":"https://www.openagentskill.com/use-cases/sports-analytics"},{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"testing-qa","title":"Testing and QA","url":"https://www.openagentskill.com/use-cases/testing-qa"}],"install":"npx skills add A-poc/BlueTeam-Tools","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add a-poc-blueteam-tools","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"BlueTeam Tools\" agent skill from https://github.com/A-poc/BlueTeam-Tools. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Tools and Techniques for Blue Team / Incident Response After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"a-poc-blueteam-tools\",\"task\":\"Install BlueTeam Tools\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"BlueTeam Tools\" as a Claude Code skill from https://github.com/A-poc/BlueTeam-Tools. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Tools and Techniques for Blue Team / Incident Response After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"a-poc-blueteam-tools\",\"task\":\"Install BlueTeam Tools\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"BlueTeam Tools\" from https://github.com/A-poc/BlueTeam-Tools into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Tools and Techniques for Blue Team / Incident Response After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"a-poc-blueteam-tools\",\"task\":\"Install BlueTeam Tools\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/A-poc/BlueTeam-Tools","github_repo":"A-poc/BlueTeam-Tools","version":"1.0.0","license":"Unknown","updated_at":"2026-09-01T11:59:28.941454+00:00","canonical_key":"a-poc/blueteam-tools","recommendation_reasons":["Matches task terms: incident, response","Useful GitHub adoption: 4,312 stars","Install handoff is available","Repository freshness signal is available","Registry match score 21"],"urls":{"web":"https://www.openagentskill.com/skills/a-poc-blueteam-tools","api":"https://www.openagentskill.com/api/agent/skills/a-poc-blueteam-tools","install_api":"https://www.openagentskill.com/api/skills/a-poc-blueteam-tools/install","audit":"https://www.openagentskill.com/skills/a-poc-blueteam-tools/audit","repository":"https://github.com/A-poc/BlueTeam-Tools"}},{"rank":10,"match_type":"related","match_score":20,"raw_match_score":219.1,"semantic_relevance":30,"ranking_signals":{"retrieval":178,"semantic":30,"quality":16.3,"projectPopularity":18.8,"verifiedOutcomes":0,"verifiedSource":6},"slug":"hneemann-digital","name":"Digital","description":"A digital logic designer and circuit simulator.","tagline":"A digital logic designer and circuit simulator.","category":"education","tags":["education","learning","circuit","digital-circuits","logic","logic-gates","logisim","simulator","java","github"],"author":{"name":"hneemann","verified":true,"url":"https://github.com/hneemann"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"hneemann/Digital","creatorName":"hneemann","creatorUrl":"https://github.com/hneemann","sourceUrl":"https://github.com/hneemann/Digital","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/hneemann-digital#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":5782,"forks":576,"verified_installs":0,"install_attempts":0,"successful_runs":0,"total_outcomes":0,"downloads":0,"rating":0,"review_count":0,"quality_score":65.04},"quality":{"score":97,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"5.8K","tone":"positive"},{"label":"Freshness","value":"3mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"GPL-3.0","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v4","score":87,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":94,"weight":0.13,"status":"pass","detail":"5.8K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":88,"weight":0.08,"status":"pass","detail":"5.8K stars, 576 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":88,"weight":0.14,"status":"pass","detail":"3mo since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"GPL-3.0"},{"id":"documentation","label":"README/SKILL.md completeness","score":50,"weight":0.14,"status":"warn","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add hneemann/Digital"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":100,"weight":0.07,"status":"pass","detail":"no high-risk permission surface in public metadata"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/hneemann/Digital"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"5.8K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"5.8K stars, 576 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"3mo since push"},{"status":"pass","label":"License clarity","detail":"GPL-3.0"},{"status":"warn","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add hneemann/Digital"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"no high-risk permission surface in public metadata"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/hneemann/Digital"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"],"evidence":{"stars":"5.8K GitHub stars","repoActivity":"5.8K stars, 576 forks","lastPushed":"3mo since push","license":"GPL-3.0","repository":"https://github.com/hneemann/Digital","install":"npx skills add hneemann/Digital","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add hneemann/Digital","policy":"agent_install_candidate","label":"Agent install candidate","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","3mo since push"]},"agentCompatibility":["Java","Education","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":true,"sandboxRequired":true,"policy":"agent_install_candidate","reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"bestFor":["education","learning","circuit","digital-circuits","logic","logic-gates"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"knownRisks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety":{"score":78,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","summary":"Good audit and safety signals with no high-risk permission hints in public metadata.","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","auto_install_policy":"review","reasons":["Safe-to-try audit","78/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"}],"policy_warnings":["Documentation summary is thin"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","reasons":["Safe-to-try audit","78/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"github-automation","title":"GitHub automation"},{"slug":"coding-agents","title":"Coding agents"},{"slug":"browser-automation","title":"Browser automation"}]},"applicableAgents":["CLI","Codex","Claude Code","Cursor","Java"],"install":{"ready":true,"command":"npx skills add hneemann/Digital","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":5782,"starsLabel":"5.8K","forks":576,"license":"GPL-3.0","qualityScore":97,"trustScore":87,"auditScore":90},"maintenance":{"status":"active","label":"3mo since push","daysSincePush":85,"lastPushedAt":"2026-06-12T17:09:11+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"coverageTags":["Coding","GitHub automation","education","learning","circuit","digital-circuits","logic","logic-gates"]},"audit":{"audit_score":90,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for GitHub automation","role":"Primary pick","primary_fit":"GitHub automation","best_for":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one GitHub automation task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"hneemann-digital","name":"Digital","description":"A digital logic designer and circuit simulator.","category":"education","url":"https://www.openagentskill.com/skills/hneemann-digital","repository":"https://github.com/hneemann/Digital","github_repo":"hneemann/Digital"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Inspect source files","Explain architecture"],"suited_agents":["Java","Education","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add hneemann/Digital","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add hneemann-digital"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Digital\" agent skill from https://github.com/hneemann/Digital. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: A digital logic designer and circuit simulator. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"hneemann-digital\",\"task\":\"Install Digital\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Digital\" as a Claude Code skill from https://github.com/hneemann/Digital. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: A digital logic designer and circuit simulator. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"hneemann-digital\",\"task\":\"Install Digital\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Digital\" from https://github.com/hneemann/Digital into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: A digital logic designer and circuit simulator. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"hneemann-digital\",\"task\":\"Install Digital\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/hneemann-digital/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/hneemann-digital"},"trust":{"score":87,"label":"Production candidate","version":"trust-score-v4","install_policy":"agent_install_candidate","evidence":{"stars":"5.8K GitHub stars","repoActivity":"5.8K stars, 576 forks","lastPushed":"3mo since push","license":"GPL-3.0","repository":"https://github.com/hneemann/Digital","install":"npx skills add hneemann/Digital","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":true,"sandbox_required":true,"reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"best_for":["education","learning","circuit","digital-circuits","logic","logic-gates"],"known_risks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":90,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":97,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"agent_contract":{"task_input":"Use Digital in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 87/100 Production candidate","Audit: 90/100 Safe to try","Safety: 78/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"hneemann-digital (Digital)","install_command":"npx skills add hneemann/Digital","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"hneemann-digital","task":"Use Digital in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/hneemann-digital","api":"https://www.openagentskill.com/api/agent/skills/hneemann-digital","audit":"https://www.openagentskill.com/skills/hneemann-digital/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=hneemann-digital&task=Use%20Digital%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Digital%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Digital%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/hneemann-digital/install","manifest":"https://www.openagentskill.com/api/registry/manifest/hneemann-digital"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"hneemann-digital","name":"Digital","description":"A digital logic designer and circuit simulator.","category":"education","url":"https://www.openagentskill.com/skills/hneemann-digital","repository":"https://github.com/hneemann/Digital","github_repo":"hneemann/Digital"},"suited_tasks":["GitHub automation workflows","general agent builders","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Inspect source files","Explain architecture"],"suited_agents":["Java","Education","Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add hneemann/Digital","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add hneemann-digital"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"Digital\" agent skill from https://github.com/hneemann/Digital. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: A digital logic designer and circuit simulator. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"hneemann-digital\",\"task\":\"Install Digital\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"Digital\" as a Claude Code skill from https://github.com/hneemann/Digital. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: A digital logic designer and circuit simulator. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"hneemann-digital\",\"task\":\"Install Digital\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"Digital\" from https://github.com/hneemann/Digital into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: A digital logic designer and circuit simulator. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"hneemann-digital\",\"task\":\"Install Digital\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/hneemann-digital/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/hneemann-digital"},"trust":{"score":87,"label":"Production candidate","version":"trust-score-v4","install_policy":"agent_install_candidate","evidence":{"stars":"5.8K GitHub stars","repoActivity":"5.8K stars, 576 forks","lastPushed":"3mo since push","license":"GPL-3.0","repository":"https://github.com/hneemann/Digital","install":"npx skills add hneemann/Digital","installSafety":"standard package or runtime install path","permissionSurface":"no high-risk permission surface in public metadata","documentation":"Thin public metadata","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":true,"sandbox_required":true,"reason":"Trust Score v4 allows sandbox-first agent installation after normal workspace review."},"best_for":["education","learning","circuit","digital-circuits","logic","logic-gates"],"known_risks":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":90,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context"]},"safety_gate":{"tier":"reviewed","label":"Reviewed","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow."},"quality":{"score":97,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"3mo since push","risk":"Safe to try"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No OpenAgentSkill engagement data yet","Documentation summary is thin","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface"],"agent_contract":{"task_input":"Use Digital in an agent workflow","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","install_policy":"review","minimum_review_before_use":["Trust: 87/100 Production candidate","Audit: 90/100 Safe to try","Safety: 78/100 Review before install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"hneemann-digital (Digital)","install_command":"npx skills add hneemann/Digital","risk_summary":"Safe to try; Reviewed; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"hneemann-digital","task":"Use Digital in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/hneemann-digital","api":"https://www.openagentskill.com/api/agent/skills/hneemann-digital","audit":"https://www.openagentskill.com/skills/hneemann-digital/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=hneemann-digital&task=Use%20Digital%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20Digital%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20Digital%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/hneemann-digital/install","manifest":"https://www.openagentskill.com/api/registry/manifest/hneemann-digital"}},"platforms":["Java","Education"],"use_cases":[{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"browser-automation","title":"Browser automation","url":"https://www.openagentskill.com/use-cases/browser-automation"},{"slug":"testing-qa","title":"Testing and QA","url":"https://www.openagentskill.com/use-cases/testing-qa"}],"install":"npx skills add hneemann/Digital","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add hneemann-digital","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Digital\" agent skill from https://github.com/hneemann/Digital. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: A digital logic designer and circuit simulator. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"hneemann-digital\",\"task\":\"Install Digital\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Digital\" as a Claude Code skill from https://github.com/hneemann/Digital. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: A digital logic designer and circuit simulator. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"hneemann-digital\",\"task\":\"Install Digital\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Digital\" from https://github.com/hneemann/Digital into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: A digital logic designer and circuit simulator. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"hneemann-digital\",\"task\":\"Install Digital\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/hneemann/Digital","github_repo":"hneemann/Digital","version":"1.0.0","license":"GPL-3.0","updated_at":"2026-09-01T11:59:28.941454+00:00","canonical_key":"hneemann/digital","recommendation_reasons":["Matches task terms: digital","Useful GitHub adoption: 5,782 stars","Install handoff is available","Repository freshness signal is available","Registry match score 20"],"urls":{"web":"https://www.openagentskill.com/skills/hneemann-digital","api":"https://www.openagentskill.com/api/agent/skills/hneemann-digital","install_api":"https://www.openagentskill.com/api/skills/hneemann-digital/install","audit":"https://www.openagentskill.com/skills/hneemann-digital/audit","repository":"https://github.com/hneemann/Digital"}}],"meta":{"endpoint":"/api/skills/search","canonical_agent_endpoint":"/api/agent/resolve","ranking_model":"hybrid-v2-task-fit-quality-outcomes","shortlist_policy":"Return one best match plus up to four distinct alternatives; suppress unrelated direct-name matches.","lookup_intent":false,"exact_match_found":true,"match_counts":{"exact":1,"near":0,"related":9},"no_match_message":null,"safety_policy":"Blocked candidates are excluded by default. Pass include_blocked=true only for manual audit workflows.","agent_friendly":true,"api_version":"1.0","generated_at":"2026-09-06T03:02:45.936Z"}}