Skip to content

ai-repo-safety@1.0

Public

AI Repo Safety is maintained by letya999 at https://github.com/letya999/ai-repo-safety-skill under MIT. Guardrails for AI-authored repositories: secret scanning, SAST, GitHub read safety, and MCP/skill supply-chain checks. Canary source for Official sync. AI STP publishes this snapshot for discovery. AI STP does not claim upstream authorship or affiliation. A verified maintainer may request an ownership transfer, which AI STP will review.

experimental
skill
claude-code

102,936 tokens

Potential context from this component, not actual model usage:

Published
2026-09-30T00:13:42.272Z
Harness
claude-code
Supported OS
None listed
Type
skill
Projection
native_files
License
MIT
Requires credentials
No
Requires authorization
none
Publisher
account_01KZET6ZKJN7S72T5H4WDV62T0
Tags
security
code-review
Checks and evidence
No evidence refs published
Passport digest
sha256:d1c98da5b542e8d264cbd4164d87f9c81a316ff58a199da46b607e1a9f264cba
Author verified
Yes
Component verified
No

Harness projections

63%10 / 16 checks passed1 harness projections
  • claude-code63%Open projection details
    Safety check
    Not verified
    Full-auto recommendation
    Ineffective
    Scope
    global
    Projection
    native_files
    Technical support
    Experimental
    Implementation
    native
    Support note
    operator-reviewed official upstream projection
    Evidence freshness
    2026-09-30T00:04:09.628Z
    Safety check
    • agentic_behavior
      Passed
    • artifact_unpack
      Passed
    • content_hidden
      Passed
    • hook_command_argv
      Passed
    • hook_schema_static
      Passed
    • mcp_config_static
      Passed
    • network_intent
      Failed
      8 finding(s): dangerous_url_scheme, url_pipe_shell
    • path_denylist
      Passed
    • pi_content_pack
      Warning
      5 finding(s): pi_exfil, pi_ignore_previous
    • sast_bandit
      Warning
      3 finding(s): b101, b404, b603
    • sast_eslint_security
      Not run
      result not_run
    • sast_opengrep
      Passed
    • sast_shellcheck
      Warning
      1 finding(s): sc1007
    • sca_npm_audit
      Not run
      result not_run
    • sca_osv
      Incomplete
      result degraded
    • sca_pip_audit
      Incomplete
      result not_applicable
    • secrets_gitleaks
      Warning
      1 finding(s): private-key
    • secrets_heuristic
      Passed
    • shell_obfuscation
      Warning
      1 finding(s): b64_decoded_shell
    • skill_static_gate
      Passed
    Evidence references
    • digest: sha256:cb5006f44a9c0f982345cf6974a75f38d6ff4c79aeca19d371c16342e191a614
    • policy: safety-3
    • profile: sha256:c685d34c5386cd16ba27a57a7fd960e788dafa2544cd8f715ad88176c4ede551
View source on GitHub

Use via CLI

Public

Start the install intent for this object. The CLI asks for the harness.

ai-stp task start --intent install --idempotency-key install-component_01M1J0CDZ9SN9EVKTQ18M97Q43-1.0 --json

CLI documentation

Inspect this version via CLI

Public

Command uses the stable object id and version.

ai-stp registry version --kind component --id component_01M1J0CDZ9SN9EVKTQ18M97Q43 --version 1.0

CLI documentation

Report this version

Report this version from the CLI or the form below.

https://ai-stp.aiguild.space/en/catalog/components/component_01M1J0CDZ9SN9EVKTQ18M97Q43/versions/1.0#report

Support evidence

Support tier
beta
Support state
missing

none