repo-sentinel
Originally frommathews-tom/praxis-skills
Installation
SKILL.md
Repo Sentinel
Everything in a public repo is permanent attacker surface. This skill defines what belongs in a public repo, what does not, how to detect violations across 12 attack surfaces, how to remediate when the boundary is violated, and how to enforce continuously.
Reference files
This skill uses bundled reference files for detailed patterns and templates. Read them as needed:
| File | When to read |
|---|---|
references/attack-surfaces.md |
When auditing any surface — full definitions for Surfaces 0–12 |
references/scan-patterns.md |
When running any audit (fast-path or full) — contains all detection commands |
references/pre-release-checklist.md |
When running the Pre-Release Audit (Stage 4) — §4.1–§4.8 readiness checklist |
references/templates.md |
When setting up enforcement, generating .gitignore, or creating CI gates |
references/remediation.md |
When fixing findings or scrubbing history — contains all fix procedures |