OSS Security Analysis Skill

End-to-end audit workflow for evaluating the safety of open-source repositories before running them locally. Covers pre-run safety, dependency analysis, install script inspection, codebase pattern scanning, and report generation.

Audit Workflow

Run these five phases in order. Stop and report immediately if Phase 1 reveals critical risks. Otherwise complete all phases before scoring.

Phase 1: Pre-Run Safety Check

Goal: Determine if it is safe to install dependencies or execute any code from the repo. Do this BEFORE running any install or build commands.