{"id":"07a8c123-a0a7-4a91-b955-2942d088f13a","shortId":"aJLKWf","kind":"skill","title":"Verify Packages Are Reproducibly Rebuildable Before Trusting Artifacts With Oss Rebuild","tagline":"Query OSS Rebuild attestations and rebuild metadata so an agent can verify whether a published package artifact matches a reproducible upstream rebuild.","description":"# Verify Packages Are Reproducibly Rebuildable Before Trusting Artifacts With Oss Rebuild\n\nQuery OSS Rebuild attestations and rebuild metadata so an agent can verify whether a published package artifact matches a reproducible upstream rebuild.\n\n## Prerequisites\n\nGo, oss-rebuild CLI, optional gcloud ADC credentials for signature verification\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- $ go install github.com/google/oss-rebuild/cmd/oss-rebuild@latest\n\nRequirements and caveats from upstream:\n- PyPI (Python)\n- chained with docker to execute a rebuild locally:\n- $ oss-rebuild get pypi absl-py 2.0.0 --output=dockerfile | docker run $(docker buildx build -q -)\n\nBasic usage or getting-started notes:\n- The oss-rebuild CLI tool provides access to OSS Rebuild data:\n- bash\n- $ go run github.com/google/oss-rebuild/cmd/oss-rebuild@latest --help\n\n- Source: https://github.com/google/oss-rebuild\n- Extracted from upstream docs: https://raw.githubusercontent.com/google/oss-rebuild/HEAD/README.md\n\n## Documentation\n\n- https://docs.oss-rebuild.dev/\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild/)","tags":["verify","packages","are","reproducibly","rebuildable","before","trusting","artifacts","with","oss","rebuild","skills"],"capabilities":["skill","source-agentskillexchange","skill-verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,253 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:13:02.498Z","embedding":null,"createdAt":"2026-05-18T13:20:13.762Z","updatedAt":"2026-05-18T19:13:02.498Z","lastSeenAt":"2026-05-18T19:13:02.498Z","tsv":"'/google/oss-rebuild':158 '/google/oss-rebuild/cmd/oss-rebuild@latest':96,153 '/google/oss-rebuild/head/readme.md':165 '/skills/verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild/)':174 '2.0.0':120 'absl':118 'absl-pi':117 'access':143 'adc':75 'agent':21,54,169 'agentskillexchange.com':173 'agentskillexchange.com/skills/verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild/)':172 'artifact':8,28,41,61 'attest':15,48 'bash':148 'basic':129 'build':127 'buildx':126 'caveat':99 'chain':104 'cli':72,140 'credenti':76 'data':147 'doc':162 'docker':106,123,125 'dockerfil':122 'docs.oss-rebuild.dev':167 'document':166 'environ':91 'exchang':171 'execut':108 'extract':159 'gcloud':74 'get':115,133 'getting-start':132 'github.com':95,152,157 'github.com/google/oss-rebuild':156 'github.com/google/oss-rebuild/cmd/oss-rebuild@latest':94,151 'go':68,92,149 'help':154 'instal':80,84,93 'local':111 'match':29,62,89 'metadata':18,51 'note':135 'option':73 'oss':10,13,43,46,70,113,138,145 'oss-rebuild':69,112,137 'output':121 'packag':2,27,35,60 'path':87 'prerequisit':67 'provid':142 'publish':26,59 'py':119 'pypi':102,116 'python':103 'q':128 'queri':12,45 'raw.githubusercontent.com':164 'raw.githubusercontent.com/google/oss-rebuild/head/readme.md':163 'rebuild':5,11,14,17,33,38,44,47,50,66,71,110,114,139,146 'reproduc':4,31,37,64 'requir':97 'run':124,150 'setup':86 'signatur':78 'skill':170 'skill-verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild' 'sourc':155,168 'source-agentskillexchange' 'start':134 'tool':141 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'trust':7,40 'upstream':32,65,83,101,161 'usag':130 'use':81 'verif':79 'verifi':1,23,34,56 'whether':24,57","prices":[{"id":"ca618852-dab1-49ea-ac98-04ad4d9e1868","listingId":"07a8c123-a0a7-4a91-b955-2942d088f13a","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:20:13.762Z"}],"sources":[{"listingId":"07a8c123-a0a7-4a91-b955-2942d088f13a","source":"github","sourceId":"agentskillexchange/skills/verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild","isPrimary":false,"firstSeenAt":"2026-05-18T13:20:13.762Z","lastSeenAt":"2026-05-18T19:13:02.498Z"}],"details":{"listingId":"07a8c123-a0a7-4a91-b955-2942d088f13a","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"77dede61eb5a5c965eb4ff3369074ad75e670126","skill_md_path":"skills/verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Verify Packages Are Reproducibly Rebuildable Before Trusting Artifacts With Oss Rebuild","description":"Query OSS Rebuild attestations and rebuild metadata so an agent can verify whether a published package artifact matches a reproducible upstream rebuild."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/verify-packages-are-reproducibly-rebuildable-before-trusting-artifacts-with-oss-rebuild"},"updatedAt":"2026-05-18T19:13:02.498Z"}}