# Scan repositories for Shai-Hulud 2.0 supply-chain indicators with the detector action

> Check repositories and CI surfaces for Shai-Hulud 2.0 compromise indicators when the task is targeted supply-chain triage, not generic malware scanning.

- Skill: `agentskillexchange/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Productivity
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators

---


# Scan repositories for Shai-Hulud 2.0 supply-chain indicators with the detector action

Check repositories and CI surfaces for Shai-Hulud 2.0 compromise indicators when the task is targeted supply-chain triage, not generic malware scanning.

## Prerequisites

GitHub Action or local detector CLI, repository or monorepo to scan, and security triage review

## Installation

Use the upstream install or setup path that matches your environment:
- **STOP** - Do not run npm install or any build commands
- npm cache clean --force
- npm install --ignore-scripts # Prevent postinstall hooks
- npm audit

Requirements and caveats from upstream:
- <strong>🔑 THE SUCCESS OF THIS PROJECT DEPENDS ON YOU!</strong>
- | PostHog | 62 | posthog-node, posthog-js, @posthog/nextjs, @posthog/plugin-server |
- node scripts/update-ioc-database.js

Basic usage or getting-started notes:
- <a href="#quick-start">Quick Start</a> •
- [Quick Start](#quick-start)
- [Local CLI Usage](#local-cli-usage)

- Source: https://github.com/gensecaihq/Shai-Hulud-2.0-Detector
- Extracted from upstream docs: https://raw.githubusercontent.com/gensecaihq/Shai-Hulud-2.0-Detector/HEAD/README.md

## Documentation

- https://github.com/gensecaihq/Shai-Hulud-2.0-Detector#readme

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action/)