Deepsec Documentation Guide
vercel-labs/deepsec
Points the agent at deepsec's own docs to answer questions about initializing, configuring, resuming, scanning with and extending the vulnerability scanner.
Run brief --json to produce a structured overview of the repository.
$ npx skills add alpha-omega-security/scrutineer --skill repo-overview -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install alpha-omega-security/scrutineer repo-overview --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/alpha-omega-security/scrutineer.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/repo-overview .claude/skills/repo-overview && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "repo-overview" agent skill from https://github.com/alpha-omega-security/scrutineer/tree/main/skills/repo-overview into .claude/skills/repo-overview/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-overview", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/alpha-omega-security/scrutineer/tree/main/skills/repo-overviewType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add alpha-omega-security/scrutineer --skill repo-overview -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install alpha-omega-security/scrutineer repo-overview --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/alpha-omega-security/scrutineer.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/repo-overview .agents/skills/repo-overview && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "repo-overview" agent skill from https://github.com/alpha-omega-security/scrutineer/tree/main/skills/repo-overview into .agents/skills/repo-overview/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-overview", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add alpha-omega-security/scrutineer --skill repo-overview -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install alpha-omega-security/scrutineer repo-overview --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/alpha-omega-security/scrutineer.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/repo-overview .cursor/skills/repo-overview && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "repo-overview" agent skill from https://github.com/alpha-omega-security/scrutineer/tree/main/skills/repo-overview into .cursor/skills/repo-overview/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-overview", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/alpha-omega-security/scrutineer.git --path skills/repo-overview--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add alpha-omega-security/scrutineer --skill repo-overview -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install alpha-omega-security/scrutineer repo-overview --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/alpha-omega-security/scrutineer.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/repo-overview .gemini/skills/repo-overview && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "repo-overview" agent skill from https://github.com/alpha-omega-security/scrutineer/tree/main/skills/repo-overview into .gemini/skills/repo-overview/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-overview", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install alpha-omega-security/scrutineer repo-overviewInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add alpha-omega-security/scrutineer --skill repo-overview -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/alpha-omega-security/scrutineer.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/repo-overview .github/skills/repo-overview && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "repo-overview" agent skill from https://github.com/alpha-omega-security/scrutineer/tree/main/skills/repo-overview into .github/skills/repo-overview/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-overview", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add alpha-omega-security/scrutineer --skill repo-overview -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install alpha-omega-security/scrutineer repo-overview --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/alpha-omega-security/scrutineer.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/repo-overview .opencode/skills/repo-overview && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "repo-overview" agent skill from https://github.com/alpha-omega-security/scrutineer/tree/main/skills/repo-overview into .opencode/skills/repo-overview/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-overview", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
repo-overviewRun brief --json to produce a structured overview of the repository.
Repo Overview is an agent skill from alpha-omega-security/scrutineer. Run brief --json to produce a structured overview of the repository. Used by other skills as orientation.
Its SKILL.md is about 440 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `schema.json`). Compatibility notes: Requires the brief CLI (https://github.com/git-pkgs/brief) on PATH.
It sits in Security. The repository describes itself as: Security through scrutiny. The licence is MIT.
Read from SKILL.md and the folder at commit 8609afc. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Requires the `brief` CLI (https://github.com/git-pkgs/brief) on PATH.
From compatibility in the SKILL.md frontmatter.
Repo Overview loads about 435 tokens when it runs. Until then it costs about 30 tokens; SKILL.md has 189 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from alpha-omega-security/scrutineer at commit 8609afc, republished under its MIT licence (© alpha-omega-security). 189 words, ~435 tokens.
.claude/skills/repo-overview/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.Produce an overview of the repository cloned at ./src by invoking the brief tool and writing its output verbatim as the report. brief already does the reading, summarising, and structured-output work; this skill is the thin harness around it.
./src — the cloned repository./report.json — write the final report hereRun brief against the whole repository and write its output verbatim:
brief --json ./src > ./report.jsonThis skill always describes the whole repository, even on a scan scoped to a monorepo sub-package. It deliberately ignores scrutineer.scan_subpath: its output populates repository-level fields (languages, default branch, license) that have no per-sub-package home, so running brief against one sub-folder would overwrite the repository's metadata with a single sub-package's. Enumerating a monorepo's sub-packages is the subprojects skill's job, not this one's.
That is the whole workflow. If brief exits non-zero (including when it is missing), read its stderr and write a short {"error": "..."} JSON document to ./report.json so the caller can see what went wrong rather than getting an empty file. Do not post-process brief's output; the consumer expects its native schema. Do not try to install brief; it is pinned by the deployment.
© alpha-omega-security, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 1 other file in skills/repo-overview of alpha-omega-security/scrutineer.
Open the folder on GitHubat commit 8609afc
Repo Overview next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Repo Overview this skillalpha-omega-security/scrutineer | 242 | — | ~435 | Automated safety check: Pass | MIT | |
| Deepsec Documentation Guidevercel-labs/deepsec | 8.1k | — | ~956 | Automated safety check: Pass | Apache-2.0 | |
| Skill Scannergetsentry/skills | 1k | 4 repos | ~2.5k | Automated safety check: Warn | Apache-2.0 | |
| Serenity Aleabitoreddityan-labs/serenity-aleabitoreddit | 481 | 1 repos | ~3.3k | Automated safety check: Pass | None | |
| Security Alert Triageelastic/agent-skills | 592 | 1 repos | ~3.5k | Automated safety check: Notes | Apache-2.0 | |
| Shiro Attack CLISummerSec/ShiroAttack2 | 2.6k | — | ~945 | Automated safety check: Pass | MIT |
vercel-labs/deepsec
Points the agent at deepsec's own docs to answer questions about initializing, configuring, resuming, scanning with and extending the vulnerability scanner.
getsentry/skills
Scan agent skills for security issues. An agent skill from getsentry/skills.
yan-labs/serenity-aleabitoreddit
Apply trader Serenity's (@aleabitoreddit) AI/semiconductor supply-chain analytical lens to US-stock ideas and market judgment.
elastic/agent-skills
Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.
SummerSec/ShiroAttack2
当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro…
rundeck/rundeck
Verify if a CVE affects the project and remediate it. An agent skill from rundeck/rundeck.
alpha-omega-security/scrutineer
Default pipeline scrutineer runs when a repository is added.
alpha-omega-security/scrutineer
Audit GitHub Actions workflows with zizmor and explain reported hits using bundled trust-boundary references.
alpha-omega-security/scrutineer
Run bandit against the Python source in the repository and map its hits into the findings shape.
alpha-omega-security/scrutineer
Audit the repository against the OpenSSF Baseline with darnit, resolve the controls darnit defers to LLM analysis or could not verify, and record per-control verdicts plus the attained Baseline level.
alpha-omega-security/scrutineer
Run git-pkgs list and sbom against the repository and emit one envelope with per-section status.
alpha-omega-security/scrutineer
Mine repository history for security fixes that were never published as advisories, producing a cached worklist for threat-model and advisory-deep-dive.
Categories
Run brief --json to produce a structured overview of the repository. Repo Overview is an agent skill from alpha-omega-security/scrutineer. Run brief --json to produce a structured overview of the repository.
Repo Overview fits situations like: security work in your project.
Run `npx skills add alpha-omega-security/scrutineer --skill repo-overview -a claude-code`. Or copy the skill folder (skills/repo-overview in alpha-omega-security/scrutineer) into .claude/skills/repo-overview in your project. Claude Code loads it when a task matches its description.
Run `npx skills add alpha-omega-security/scrutineer --skill repo-overview -a codex`. Or copy the skill folder (skills/repo-overview in alpha-omega-security/scrutineer) into .agents/skills/repo-overview in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add alpha-omega-security/scrutineer --skill repo-overview -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/repo-overview, .gemini/skills/repo-overview, .github/skills/repo-overview and .opencode/skills/repo-overview in your project.
SKILL.md names no scripts, command-line tools or credentials: Repo Overview is instructions for the agent only. Compatibility (from SKILL.md): Requires the `brief` CLI (https://github.com/git-pkgs/brief) on PATH..
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Repo Overview is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
About 435 tokens (SKILL.md is roughly 1.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Repo Overview: Deepsec Documentation Guide (vercel-labs/deepsec, 8.1k stars), Skill Scanner (getsentry/skills, 1k stars), Serenity Aleabitoreddit (yan-labs/serenity-aleabitoreddit, 481 stars) and Security Alert Triage (elastic/agent-skills, 592 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
alpha-omega-security (a GitHub organization) maintains it in alpha-omega-security/scrutineer, which has 242 GitHub stars. The repository holds 48 skills in this directory. The repository was last updated on October 10, 2026.
Source: alpha-omega-security/scrutineer on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.