alexgreensh/Repo Forensics
Deep security auditing for repositories, AI agent skills, and MCP servers
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 7, 2026
- License
- None
Pinned Snippet
uses: alexgreensh/repo-forensics@d129c33712b78d7b61479906322b766d27b1cfbb # v2.12.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to repository to scan (default: workspace root) | no | . |
| mode | Scan mode: full or skill-scan | no | full |
| format | Output format: text, json, or summary | no | text |
| update-iocs | Pull latest IOC database before scanning | no | false |
| watch | Enable file integrity baseline tracking | no | false |
Outputs
| name | description |
|---|---|
| exit-code | Scanner exit code (0=clean, 1=high/medium, 2=critical) |
| findings-count | Total number of findings |