repo-sentinel

Everything in a public repo is permanent attacker surface. This skill defines what belongs in a public repo, what does not, how to detect violations across 12 attack surfaces, how to remediate when the boundary is violated, and how to enforce continuously.

This skill uses bundled reference files for detailed patterns and templates. Read them as needed:

| references/scan-patterns.md | When running any audit (fast-path or full) — contains all detection commands | | references/templates.md | When setting up enforcement, generating .gitignore, or creating CI gates | | references/remediation.md | When fixing findings or scrubbing history — contains all fix procedures |

对 12 个攻击面的公共存储库进行全面的安全审核和执行：git 历史记录、源代码、文档、配置、.gitignore recon、CI/CD、容器、依赖项、二进制文件、元数据、特定于平台的 (GitHub/GitLab)、许可证合规性和社区界面。提供快速路径和完整的 20 检查审核、预提交挂钩、CI 门、.gitignore 生成和历史记录清理。在推送到公共远程、开源存储库、编写 README/文档、配置 CI/CD 或 Dockerfile、添加依赖项或检查许可证合规性时使用。触发条件：推送到 GitHub、公开存储库、开源、设置存储库、编写 README、添加 CI/CD、创建 Dockerfile、设置预提交、添加许可证、编写 SECURITY.md、秘密泄露、凭证轮换、.claude/ 跟踪、存储库卫生、安全扫描，或者推送是否安全、预操作系统、开源准备、发布审核或开源审核。这是内部和公众之间的看门人。 来源：mathews-tom/praxis-skills。