oss-hygiene

Installation
SKILL.md

oss-hygiene

Brings a public GitHub repo up to the GitHub Community Standards baseline and the OpenSSF Scorecard supply-chain baseline, and stages it for the OpenSSF Best Practices Badge.

This sits next to /gh-bootstrap and answers a different question: gh-bootstrap locks the merge surface; oss-hygiene fills the contributor-facing and supply-chain surface.

Where this skill fits

Concern Skill
Merge button, branch protection, release-notes config /gh-bootstrap
Community files, supply-chain checks, OSSF posture /oss-hygiene (this skill)
Org-wide settings as code across many repos /safe-settings

Per-task PR / issue / CI ops are out of scope for this catalog.

Run /gh-bootstrap first (so main is locked), then /oss-hygiene (so contributors can find their way in and supply-chain checks gate PRs).

What gets configured

Installs
68
First Seen
Oct 7, 2026