capedcrusader77/SkillGuard OSS Scanner
Trust but Verify for AI Agent Skills, MCP Servers, and Plugins
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| trust_threshold | Minimum acceptable trust score (0-100) before failing the build | no | 85 |
| fail_on_critical | Whether to fail the build if any CRITICAL security findings are detected (true/false) | no | true |
| report_format | Format of the generated report (json, html, or both) | no | both |
| github_token | GitHub token for posting comments (defaults to github.token) | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| trust_score | The overall trust score of the scanned repositories |
| risk_score | The overall risk score of the scanned repositories |
| report_path | Local file path to the generated JSON report |