GitHub Agent Skill Inventory & Drift Report

A private Apify Actor that inventories SKILL.md declarations from one or two explicitly named public GitHub repositories. Each observation is pinned to an immutable commit and verified Git blob. The Actor produces normalized JSON, formula-safe CSV, escaped Markdown, a reusable baseline, a hash manifest, and a deterministic ZIP. It never installs or executes a skill.

Input

• demoMode (default false): uses an internal deterministic fixture and performs zero DNS/HTTP requests.
• repositories: 1–2 exact owner/repo names in live mode. URLs, private repositories, renamed redirects, credentials, and arbitrary hosts are rejected.
• maxSkills: global limit of 1–15 skills across all requested repositories, default 10.
• baseline: up to 100 exact prior records. Missing skills become REMOVED only after a complete scan of that same requested repository.

Try examples/input.json. The live canary input is canary_input.json and requests the first stable-sorted skill from anthropics/skills; canary validation requires at least one VALID metadata extraction.

Output

Successful runs write exactly one authoritative dataset record and the same record under OUTPUT. The record contains status, completeness, bounded warnings, commit/blob provenance, declared metadata/tools/licenses, companion paths, duplicate-hash evidence, changes, and ZIP evidence. Official optional string-to-string metadata maps are accepted after bounded validation but are not exported. Suspected credentials in exported declarations are replaced with a fixed redaction marker. Failed input or an all-repository failure writes a safe FAILED OUTPUT record and no success dataset row; a verified complete public repository with no skills remains a valid empty result.

Artifacts are INVENTORY.json, SKILLS.csv, REPORT.md, BASELINE.json, MANIFEST.json, and GITHUB_AGENT_SKILL_REPORT.zip. The ZIP contains the first five fixed paths; the manifest hashes all included files except itself, then is added as the fifth entry.

NOT_LEGAL_ADVICE: repository and frontmatter licenses are separate declarations, not legal clearance. Public availability does not grant unrestricted reuse. Verify every license with the repository owner.

Local QA

Requires exactly Node.js 22.23.3.

npm ci --ignore-scripts
npm run preflight

Container startup has a dedicated no-network path: AUTOMATON_CONTAINER_SMOKE=1. No token is accepted or needed. See SECURITY_REVIEW.md for the trust boundary and SUPPORT.md for status meanings.