Poutine

STRONG · 82

Community indexed

poutine, a supply chain vulnerability scanner for build pipelines

Downloads 0

Stars 477

Version 1.0.0

Quality 84/100 · Strong

Trust 82/100 · Strong shortlist

Audit 88/100 · Safe to try

Supply asset profile

Coding and developer agents

Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.

Browse track

Scenario

GitHub automation

I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Agent fit

Claude Code + CLI + Codex

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add boostsecurityio/poutine

Maintenance

fresh

20d since push

Risk

Safe to try

Quality score needs review

GitHub quality

477

84/100 quality · 82/100 trust

Coverage tags

CodingGitHub automationsecurityscannerci

Review notes

Quality score needs review

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Strong

Solid option that is likely worth shortlisting for production workflows.

Trust

Strong shortlist

Good trust signals with a few areas worth checking before rollout.

Audit

Safe to try

Install readiness, security metadata, maintenance, and adoption risk.

Trust Score v2

Human review before install

Test in a sandbox workflow and compare its install path with close alternatives.

GoSecurityCodexClaude CodeCursor

Stars

477 GitHub stars

Maintenance

20d since push

License

Apache-2.0

Install

npx skills add boostsecurityio/poutine

Risk summary

Low metadata risk

Quality score needs review

Install readiness

Install path available

Install path is available
Repository evidence is available
License is declared
20d since push

Agent safety v2

60/100 · Review before install

Reviewed with permission notesreview

Usable candidate, but the agent should surface permission and audit notes before installation.

Require human approval before installing into a real workspace.

Resolve via API

high

Shell or command execution

Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

High-risk permission hints: Shell or command execution
Quality score needs review

Install targets

Install this skill in your agent workflow

Copy the registry command or an agent-specific install prompt for Codex, Claude Code, and Cursor.

skill install

OpenAgentSkill CLI

Use the registry command when your workflow supports the OpenAgentSkill installer.

$ npx skills add boostsecurityio/poutine

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Resolve JSON

/api/agent/resolve?task=Use%20Poutine%20for%20an%20agent%20workflow&agent=codex&max_risk=medium

Resolve text

/api/agent/resolve?task=Use%20Poutine%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text

Install handoff

/api/skills/boostsecurityio-poutine/install

Agent should check

Task fit and alternatives from Resolve API.
Audit score, trust score, and safety policy warnings.
Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use Poutine in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20Poutine%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/boostsecurityio-poutine/install
Install command: npx skills add boostsecurityio/poutine
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Install handoff

/api/skills/boostsecurityio-poutine/install

LLM text format

/api/skills/boostsecurityio-poutine/install?format=text

Find alternatives

/api/skills/search?q=Poutine&limit=3

Agent prompt

Use Poutine for this task. Review https://www.openagentskill.com/api/skills/boostsecurityio-poutine/install, then install with: npx skills add boostsecurityio/poutine

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Manifest

/api/registry/manifest/boostsecurityio-poutine

LLM text

/api/registry/manifest/boostsecurityio-poutine?format=text

Install alias

/api/registry/install/boostsecurityio-poutine

Recommend

/api/registry/recommend?task=Use%20Poutine%20in%20an%20agent%20workflow&limit=3

Agent fit

83/100

GitHub automation

Use-case tags

GitHub automation Security and compliance Coding agents

Platforms

Go, Security, Claude Code

Audit report

Safe to try · 88/100

Review install readiness, maintenance, trust, quality, and metadata warnings before adding this skill to an agent workflow.

View audit report

Agent decision cockpit

Companion skill for GitHub automation

Shortlist this skill and compare it with close alternatives before production adoption.

Readiness

Shortlist

Stage

Role in stack

Companion skill

Primary fit

GitHub automation

Trust label

Strong shortlist

Install path

Command ready

Use when

GitHub automation workflows
Claude Code teams
builders willing to evaluate younger projects

Evidence

recent repository activity
install command or GitHub repo available
84/100 quality profile

Review first

No OpenAgentSkill engagement data yet

Implementation path

1Install it in a sandbox agent and run one GitHub automation task end to end.
2Compare output quality, latency, and failure behavior against at least one alternative.
3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Strong shortlist

Good trust signals with a few areas worth checking before rollout.

Trust score

GitHub adoption

INFO

477 GitHub stars

Recent maintenance

PASS

20d since push

License clarity

PASS

Apache-2.0

README/SKILL.md completeness

INFO

Public metadata needs stronger README/SKILL.md context

Good signals

AI review approved
Install path is available
Repository evidence is available
Recently maintained repository

Review before install

Quality score needs review

Recommended action

Test in a sandbox workflow and compare its install path with close alternatives.

Quality profile

Strong candidate for agent workflows

Solid option that is likely worth shortlisting for production workflows.

GitHub stars

477

Freshness

20d ago

Install ready

Yes

License

Apache-2.0

Workflow fit

Use this skill in these scenarios

Manage repositories

GitHub automation

I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Reduce risk

Security and compliance

I need my agent to scan a project for security risks and summarize what needs attention.

Build and ship code

Coding agents

I need a coding agent that can understand a repository, edit code, and review pull requests.

Stack fit

Add it to a complete workflow

Turn skills into distribution

Content growth agent

A stack for turning newly indexed skills into SEO briefs, social drafts, comparison pages, and reusable publishing workflows.

Inspect, patch, and verify code

Coding review agent

A stack for software agents that inspect repositories, review pull requests, generate tests, and turn findings into shippable patches.

Ingest, retrieve, and cite

RAG knowledge base

A stack for document-heavy agents that ingest files, create searchable knowledge, retrieve relevant context, and answer with grounded sources.

Alternative shortlist

Compare before you install

Similar skills in this category, ranked with the same readiness and quality signals.

Compare all

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

Nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Zaproxy

The ZAP by Checkmarx Core project

Overview

poutine, a supply chain vulnerability scanner for build pipelines

Imported by the skill-only GitHub discovery pipeline because it matches agent skill, automation, domain workflow, RAG, document-processing, data, finance, security, or developer-tool signals. Protocol-server projects are excluded from automated imports.

Platform Compatibility

goFULL

securityFULL

Technical Details

Version: 1.0.0
License: Apache-2.0
Last Updated: 6/16/2026
Published: 6/16/2026

Frameworks & Tools

GoSecurity

Decision snapshot

Companion skill

Ready

Shortlist

Stage

recent repository activity

Audit Snapshot

Install and adoption review

Safe to try

Security: 92/100
Maintenance: 100/100
Install: 92/100

Open full audit

Install

Free and open source

Compare Alternatives Auto-resolve Plan View on GitHub Documentation

Growth loop

Share this skill

Scenario-led draft for Poutine, with the OpenAgentSkill Update theme and canonical URL.

OpenAgentSkill Update
Today: Poutine

Use it when you want your coding agent to carry more repo context and ship repetitive changes faster.

477 stars - security
Link: https://www.openagentskill.com/skills/boostsecurityio-poutine?ref=x
#AIAgents #OpenAgentSkill

Open X draft

Optional reply with install command

Link for Poutine:
https://www.openagentskill.com/skills/boostsecurityio-poutine?ref=x

Install: npx skills add boostsecurityio/poutine

Open reply draft

Listing source

Community indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Creator: boostsecurityio
Source: boostsecurityio/poutine
Indexed by: OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

This community indexed listing is attributed to boostsecurityio but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.

README badge

Add this badge to your GitHub README to show the listing, trust score, and install handoff.

[![OpenAgentSkill](https://www.openagentskill.com/api/badge/boostsecurityio-poutine)](https://www.openagentskill.com/skills/boostsecurityio-poutine)

Preview badge Audit badge

Author

boostsecurityio

@boostsecurityio

Platform Fit

Claude Code

Health Signals

GitHub stars: 477
Quality score: 52/100
Last GitHub push: May 26, 2026
Framework hints: 2
OpenAgentSkill views: 0
Install copies: 0
Outbound clicks: 0

Community Signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & Safety

Strong shortlist

GitHub adoption477 GitHub starsINFO
Recent maintenance20d since pushPASS
License clarityApache-2.0PASS
README/SKILL.md completenessPublic metadata needs stronger README/SKILL.md contextINFO
Dependency riskcommand execution surfaceINFO
Install availabilitynpx skills add boostsecurityio/poutinePASS

Related Skills

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

32.9K stars · 0 installs

Nuclei

29.2K stars · 0 installs

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

15.9K stars · 0 installs

Zaproxy

The ZAP by Checkmarx Core project

15.3K stars · 0 installs

Poutine

Coding and developer agents

Trust, audit, and install readiness at a glance

Human review before install

Low metadata risk

Install path available

60/100 · Review before install

Shell or command execution

Network access

Filesystem access

Install this skill in your agent workflow

OpenAgentSkill CLI

Let an agent verify fit before installing.

Give an agent the install path, not another directory page.

Agent-readable profile for automatic skill selection.

Safe to try · 88/100

Companion skill for GitHub automation

Strong shortlist

Strong candidate for agent workflows

Use this skill in these scenarios

GitHub automation

Security and compliance

Coding agents

Add it to a complete workflow

Content growth agent

Coding review agent

RAG knowledge base

Compare before you install

Maigret

Nuclei

Wazuh

Zaproxy

Overview

Platform Compatibility

Technical Details

Companion skill

Audit Snapshot

Install

Share this skill

Community indexed

Claim this skill listing

README badge

Author

Tags

Platform Fit

Health Signals

Community Signal

Trust & Safety

Related Skills