Use when the user wants to evaluate a GitHub repository before installing, running, forking, or depending on it. Takes a GitHub repo URL, cleans tracking params, shallow-clones to /tmp, inspects dependency/supply-chain risk, static vulnerability patterns, issue-reported security problems, maintainer health, and produces a risk summary.
Install
npx skills add KerberosClaw/kc_ai_skills --skill repo-scannpx skills add KerberosClaw/kc_ai_skills --skill repo-scan -a claude-code -gnpx skills add KerberosClaw/kc_ai_skills --skill repo-scan -a codex -ggemini skills install https://github.com/KerberosClaw/kc_ai_skills.git --path repo-scangh skill install KerberosClaw/kc_ai_skills repo-scangit clone --depth 1 https://github.com/KerberosClaw/kc_ai_skills /tmp/KerberosClaw__kc_ai_skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/KerberosClaw__kc_ai_skills/repo-scan ~/.claude/skills/repo-scan # Claude Code
cp -R /tmp/KerberosClaw__kc_ai_skills/repo-scan ~/.agents/skills/repo-scan # Codex, Cursor, Gemini CLI, Copilot, OpenCode