{"id":"bb77bccd-88b0-4e59-bc8d-a812413856b9","shortId":"qRYAez","kind":"skill","title":"Scan repositories for Shai-Hulud 2.0 supply-chain indicators with the detector action","tagline":"Check repositories and CI surfaces for Shai-Hulud 2.0 compromise indicators when the task is targeted supply-chain triage, not generic malware scanning.","description":"# Scan repositories for Shai-Hulud 2.0 supply-chain indicators with the detector action\n\nCheck repositories and CI surfaces for Shai-Hulud 2.0 compromise indicators when the task is targeted supply-chain triage, not generic malware scanning.\n\n## Prerequisites\n\nGitHub Action or local detector CLI, repository or monorepo to scan, and security triage review\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- **STOP** - Do not run npm install or any build commands\n- npm cache clean --force\n- npm install --ignore-scripts # Prevent postinstall hooks\n- npm audit\n\nRequirements and caveats from upstream:\n- <strong>🔑 THE SUCCESS OF THIS PROJECT DEPENDS ON YOU!</strong>\n- | PostHog | 62 | posthog-node, posthog-js, @posthog/nextjs, @posthog/plugin-server |\n- node scripts/update-ioc-database.js\n\nBasic usage or getting-started notes:\n- <a href=\"#quick-start\">Quick Start</a> •\n- [Quick Start](#quick-start)\n- [Local CLI Usage](#local-cli-usage)\n\n- Source: https://github.com/gensecaihq/Shai-Hulud-2.0-Detector\n- Extracted from upstream docs: https://raw.githubusercontent.com/gensecaihq/Shai-Hulud-2.0-Detector/HEAD/README.md\n\n## Documentation\n\n- https://github.com/gensecaihq/Shai-Hulud-2.0-Detector#readme\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action/)","tags":["scan","repositories","for","shai","hulud","supply","chain","indicators","with","the","detector","action"],"capabilities":["skill","source-agentskillexchange","skill-scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,407 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:12:18.775Z","embedding":null,"createdAt":"2026-05-18T13:19:09.806Z","updatedAt":"2026-05-18T19:12:18.775Z","lastSeenAt":"2026-05-18T19:12:18.775Z","tsv":"'/gensecaihq/shai-hulud-2.0-detector':182 '/gensecaihq/shai-hulud-2.0-detector#readme':193 '/gensecaihq/shai-hulud-2.0-detector/head/readme.md':189 '/skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action/)':200 '2.0':7,25,47,65 '62':147 'action':15,55,83 'agent':195 'agentskillexchange.com':199 'agentskillexchange.com/skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action/)':198 'audit':132 'basic':158 'build':117 'cach':120 'caveat':135 'chain':10,35,50,75 'check':16,56 'ci':19,59 'clean':121 'cli':87,173,177 'command':118 'compromis':26,66 'depend':143 'detector':14,54,86 'doc':186 'document':190 'environ':108 'exchang':197 'extract':183 'forc':122 'generic':38,78 'get':162 'getting-start':161 'github':82 'github.com':181,192 'github.com/gensecaihq/shai-hulud-2.0-detector':180 'github.com/gensecaihq/shai-hulud-2.0-detector#readme':191 'hook':130 'hulud':6,24,46,64 'ignor':126 'ignore-script':125 'indic':11,27,51,67 'instal':97,101,114,124 'js':153 'local':85,172,176 'local-cli-usag':175 'malwar':39,79 'match':106 'monorepo':90 'node':150,156 'note':164 'npm':113,119,123,131 'path':104 'posthog':146,149,152 'posthog-j':151 'posthog-nod':148 'posthog/nextjs':154 'posthog/plugin-server':155 'postinstal':129 'prerequisit':81 'prevent':128 'project':142 'quick':165,167,170 'quick-start':169 'raw.githubusercontent.com':188 'raw.githubusercontent.com/gensecaihq/shai-hulud-2.0-detector/head/readme.md':187 'repositori':2,17,42,57,88 'requir':133 'review':96 'run':112 'scan':1,40,41,80,92 'script':127 'scripts/update-ioc-database.js':157 'secur':94 'setup':103 'shai':5,23,45,63 'shai-hulud':4,22,44,62 'skill':196 'skill-scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action' 'sourc':179,194 'source-agentskillexchange' 'start':163,166,168,171 'stop':109 'success':139 'suppli':9,34,49,74 'supply-chain':8,33,48,73 'surfac':20,60 'target':32,72 'task':30,70 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'triag':36,76,95 'upstream':100,137,185 'usag':159,174,178 'use':98","prices":[{"id":"032a93e5-0dfa-40ec-9f95-7ddfc377de98","listingId":"bb77bccd-88b0-4e59-bc8d-a812413856b9","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:19:09.806Z"}],"sources":[{"listingId":"bb77bccd-88b0-4e59-bc8d-a812413856b9","source":"github","sourceId":"agentskillexchange/skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action","isPrimary":false,"firstSeenAt":"2026-05-18T13:19:09.806Z","lastSeenAt":"2026-05-18T19:12:18.775Z"}],"details":{"listingId":"bb77bccd-88b0-4e59-bc8d-a812413856b9","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"ead0ed063d59a9586214fe87fb4946c46e5521b0","skill_md_path":"skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Scan repositories for Shai-Hulud 2.0 supply-chain indicators with the detector action","description":"Check repositories and CI surfaces for Shai-Hulud 2.0 compromise indicators when the task is targeted supply-chain triage, not generic malware scanning."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/scan-repositories-for-shai-hulud-2-0-supply-chain-indicators-with-the-detector-action"},"updatedAt":"2026-05-18T19:12:18.775Z"}}