getsentry-gha-security-review/BB-SKILLS-REVIEW.json

Version d18b7aa8ba87.bb1 · Apache-2.0. This preview displays packaged text and does not execute code. Treat the contents as untrusted instructions.

← Return to resource and package checksum

{
  "format": 1,
  "checked_at": "2026-10-03",
  "source_commit": "d18b7aa8ba878354e5c348310230e652f7690f9c",
  "requirements": "Access to workflow YAML, local actions, and relevant repository configuration; a client able to read and search project files.",
  "cost_notes": "Review only repositories you are authorized to inspect. Keep examples inert; do not run exploit payloads, expose tokens, or execute untrusted pull-request code. Agent review is not a security certification. Core frontmatter was adapted by BB Skills for the existing namespace directory; unchanged original SKILL.md is archived. This does not imply client execution was tested.",
  "runtime_tested": false,
  "checks": [
    "Pinned upstream source and Git blob hashes verified",
    "Applicable original license and notices preserved",
    "Archive paths and metadata validated",
    "Local Markdown and named reference files checked",
    "Core skill identity adapted; original instruction body and source files preserved"
  ],
  "file_hashes": {
    "getsentry-gha-security-review/LICENSE.upstream.txt": "96e78a9ce85795b117c8929887bdb78f88bf23f7b85a31f0872cde4dff7e92cd",
    "getsentry-gha-security-review/SKILL.md": "df5afdc5c8c80a3b777c4077ef12f53f9e6eb6956fe9ae38b010b03d8b7769f7",
    "getsentry-gha-security-review/SOURCE.txt": "0ce3f14fe1affb112da5628da7276f0211da24df53823e0a056c42610f98cb0f",
    "getsentry-gha-security-review/references/ai-prompt-injection-via-ci.md": "9177d24968ac5b8d719b9f6748f91751d5e157ae0afa4d41cd0bb760356f23a2",
    "getsentry-gha-security-review/references/comment-triggered-commands.md": "243526302999b7cbcbff4bbdd01c7d16377b1c60a86ee8877326c2b2b040a0b3",
    "getsentry-gha-security-review/references/credential-escalation.md": "7febad6c0e4073dabfb338ee4646c2dd484251ad7d18b500ea83ad6fd9ac1a1d",
    "getsentry-gha-security-review/references/expression-injection.md": "f701049355e4758207f77efc53c8e4a42f377eaa15240a2c867446154041d4f0",
    "getsentry-gha-security-review/references/permissions-and-secrets.md": "6b6837c5f37ff85cf18c1f611f882202ce0ce41cb006b55dd49c4da52f976779",
    "getsentry-gha-security-review/references/pwn-request.md": "6dd84c91ce77d57883059edf95c2f1c64ea1ec39551c5c8208e0cadb9c3ca673",
    "getsentry-gha-security-review/references/real-world-attacks.md": "761260977a220264a1ee30e0b961618495723c2e6cc4e91893b7d9d4a9408718",
    "getsentry-gha-security-review/references/runner-infrastructure.md": "cb427fa29c34c10aef18766441e0be8e0123632bb87c307bdb8d1c40b47fc81e",
    "getsentry-gha-security-review/references/supply-chain.md": "1f80df872a1be8f70ccf1be0bb25b2e24ee1ec2ac6a9f3d7a53800cb361bfa86",
    "getsentry-gha-security-review/upstream-notices/LICENSE": "96e78a9ce85795b117c8929887bdb78f88bf23f7b85a31f0872cde4dff7e92cd",
    "getsentry-gha-security-review/upstream-original/SKILL.md": "b75c6c43ff99c82b3cf44519bd30723917de97064f225e392ecfd6fdcd7455bd",
    "getsentry-gha-security-review/BB-SKILLS-ADAPTATION.json": "2c4744d66f914882e0bccbda008e3d0be2d7ce74ed307f456598c7d9f8dbdf36"
  }
}