aibot88 Scan repositories for Shai-Hulud 2.0 supply-chain indicators with the detector action
Check repositories and CI surfaces for Shai-Hulud 2.0 compromise indicators when the task is targeted supply-chain triage, not generic malware scanning.
Prerequisites
GitHub Action or local detector CLI, repository or monorepo to scan, and security triage review
Installation
Choose whichever fits your setup:
- Copy this skill folder into your local skills directory.
- Clone the repo and symlink or copy the skill into your agent workspace.
- Add the repo as a git submodule if you manage shared skills centrally.
- Install it through your internal provisioning or packaging workflow.
- Download the folder directly from GitHub and place it in your skills collection.
Install command or upstream instructions:
Use the upstream GitHub Action in CI or run the detector locally, then review the campaign-specific findings, SARIF output, and incident-response guidance from the project documentation.