Use this skill to identify non-Red Hat RPM packages installed in container images or on the local machine. For containers, pulls images across multiple architectures and release tags; for local scans, inspects the host directly. Extracts RPM signing metadata and reports packages not signed with the Red Hat GPG key as CSV output. Use when auditing compliance, checking supply-chain provenance, or scanning for third-party RPMs in RHOAI component images.
$npx -y skills add opendatahub-io/ai-helpers --skill non-redhat-rpmsInstalls into the current project.
Run `npx skills use "https://github.com/opendatahub-io/ai-helpers" --skill "opendatahub-io/ai-helpers/non-redhat-rpms"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/opendatahub-io/ai-helpers" that are relevant to the current task. Run `npx skills add "https://github.com/opendatahub-io/ai-helpers"` and select the relevant skills, then follow their instructions.