Repository
ossf/oss-crs agent skills
- skills
- 2
- GitHub stars
- 165
GitHub description: “Cyber Reasoning Systems for Bug-Finding and Patching in Open Source Software”
- Stars
- 165 (33 forks)
- Licence
- MIT
- Last push
- Oct 2026
- Created
- Nov 2025
- Homepage
- oss-crs.openssf.org
- Source
- github.com/ossf/oss-crs
Install all skills
npx skills add ossf/oss-crsAdd --skill <name> for a single skill and -a <agent> to choose the agent (see the agent guides).
Skills in ossf/oss-crs, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Read every open Dependabot PR for an application-code dependency (Python pip/uv and JS npm/yarn/pnpm) and carry each version bump over to the local dependency files (requirements.txt… | ossf/ | 165 | — | ~1.7k | Automated safety check: Notes | MIT | yesterday |
| 2 | After a Dependabot bump of oss-crs-infra/dependabot-pins.Dockerfile, resolve the human-readable version tag for each updated digest, fix the inline comment, and sync the digest to… | ossf/ | 165 | — | ~1.7k | Automated safety check: Notes | MIT | yesterday |
Questions, answered from the data.
What is the best skill in ossf/oss-crs?
Sync Dependabot App Deps from ossf/oss-crs ranks first of the 2 skills in ossf/oss-crs listed here, with the highest score: its repository has 165 GitHub stars, its SKILL.md loads about 1.7k tokens and it has informational notes only in the automated safety check. Next come Sync Dependabot Pins.
Are the skills in ossf/oss-crs official?
None yet. All 2 skills in ossf/oss-crs listed here come from community repositories; a skill counts as official when the product's own GitHub organization publishes it.
How do I install all skills from ossf/oss-crs?
Run npx skills add ossf/oss-crs in your project: the open-source skills CLI installs the repository's skills into your coding agent's skills folder. To install a single skill, open its page here for the exact command.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.