oss-tool-trust-audit

Overview

An evidence-driven trust audit that reads source and release machinery, treats popularity as context rather than proof, and separates technical legitimacy from adoption fit.

The skill is evidence-first. It identifies unavailable evidence, separates facts from interpretations, and does not claim a repair or successful outcome merely because a command returned without an obvious error.

When to Use

• Is this viral GitHub tool safe?
• Audit this npm package before I install it.
• Does this CLI phone home?
• Should we use, fork, build, or skip this tool?

Counter-Triggers

Do not load this skill when: