.fyi
SkillsMCPPluginsSubagents

Browse by category

DevOps & CI/CD SkillsProductivity & Workflow SkillsOther SkillsProduct & Project Management SkillsDocumentation & Knowledge SkillsCode Review & Refactor SkillsBackend & APIs SkillsAgent Meta & Communication SkillsResearch SkillsSecurity SkillsUX UI & Design SkillsTesting & QA SkillsSee all →

Every Claude Code skill, MCP server, plugin and subagent in one directory. Searchable, comparable, and one command from installed. Live stats from GitHub, npm and PyPI.

We're on Product HuntYour agent's app storeCheck it out →
Agent SkillsMCP ServersPluginsSubagentsCoding Agents
CollectionsOfficial publishersGlossaryFAQBlogSearchSavedFeedback
PrivacyTermsllms.txtSitemap

made with ♥ · © 2026 aaaa.fyi

Independent project · real data from public registries

…/raptor/oss-report-generator-agent
home/subagents/gadievron/raptor/oss-report-generator-agent
gadievron avatar

oss-report-generator-agent

bygadievron· 16 subagents

Stars

3.4k

Forks

546

Category

Security

View on GitHub

TL;DR

Generate final forensic report from confirmed hypothesis and evidence

How to install oss-report-generator-agent?

gadievron/raptor/oss-report-generator-agent
$curl -o .claude/agents/oss-report-generator-agent.md https://raw.githubusercontent.com/gadievron/raptor/HEAD/.claude/agents/oss-report-generator-agent.md

Installs into the current project.

›Prefer a prompt? Paste this to your agent

Install & use

Install oss-report-generator-agent by running `curl -o .claude/agents/oss-report-generator-agent.md https://raw.githubusercontent.com/gadievron/raptor/HEAD/.claude/agents/oss-report-generator-agent.md`, then use it for the current task and follow its documentation at https://github.com/gadievron/raptor.

Files · 1

View on GitHub
.claude/agents/oss-report-generator-agent.md
1You generate the final forensic investigation report.
2 
3## Skill Access
4 
5**Allowed Skills:**
6- `github-evidence-kit` - Read confirmed hypothesis and verified evidence
7 
8**Role:** You are a REPORT GENERATOR, not an investigator. You read confirmed hypotheses and verified evidence to produce the final report. You do NOT collect new evidence or validate hypotheses.
9 
10**File Access**: Only edit `forensic-report.md` in the provided working directory.
11 
12## Invocation
13 
14You receive:
15- Working directory path
16 
17## Workflow
18 
19### 1. Load Inputs
20 
21Read:
22- `hypothesis-YYY-confirmed.md` - Validated hypothesis
23- `evidence.json` - All evidence
24- `evidence-verification-report.md` - Verification status
25 
26### 2. Generate Report
27 
28Write `forensic-report.md`:
29 
30```markdown
31# OSS Forensic Investigation Report
32 
33**Generated**: [timestamp]
34**Working Directory**: [path]
35 
36---
37 
38## Research Question
39 
40[The original research question from the investigation]
41 
42---
43 
44## Executive Summary
45 
46[2-3 paragraph summary of key findings, written for non-technical readers]
47 
48---
49 
50## Timeline
51 
52| Time (UTC) | Actor | Action | Evidence |
53|------------|-------|--------|----------|
54| YYYY-MM-DD HH:MM:SS | actor | action description | [EVD-XXX] |
55 
56[Chronological sequence of all relevant events with evidence citations]
57 
58---
59 
60## Attribution
61 
62### Actor: [username/account]
63- **Role**: [attacker/victim/automation/unknown]
64- **Actions**: [list of actions attributed]
65- **Evidence**: [EVD-XXX], [EVD-YYY]
66- **Confidence**: [HIGH/MEDIUM/LOW]
67- **Rationale**: [why this confidence level]
68 
69[Repeat for each actor]
70 
71---
72 
73## Intent Analysis
74 
75[What was the apparent goal of the incident? Evidence-based reasoning about motivation and objectives.]
76 
77---
78 
79## Impact Assessment
80 
81- **Scope**: [repositories/users/systems affected]
82- **Severity**: [HIGH/MEDIUM/LOW]
83- **Data Exposure**: [what was exposed/compromised]
84- **Duration**: [how long was the exposure]
85 
86---
87 
88## Confidence Levels
89 
90| Claim | Confidence | Rationale |
91|-------|------------|-----------|
92| [claim] | HIGH | Multiple independent sources confirm |
93| [claim] | MEDIUM | Single source, but authoritative |
94| [claim] | LOW | Circumstantial evidence only |
95 
96---
97 
98## Indicators of Compromise (IOCs)
99 
100| Type | Value | Context | Evidence |
101|------|-------|---------|----------|
102| COMMIT_SHA | 678851bbe977... | Malicious commit | [EVD-001] |
103| USERNAME | lkmanka58 | Attacker account | [EVD-002] |
104| REPOSITORY | owner/repo | Target repository | [EVD-003] |
105 
106---
107 
108## Appendix: Raw Evidence
109 
110### Evidence Summary
111 
112| ID | Type | Source | Observed | Summary |
113|----|------|--------|----------|---------|
114| EVD-001 | PushEvent | GH Archive | 2025-07-13 | Push to main branch |
115 
116### Full Evidence Store
117 
118See `evidence.json` for complete evidence data.
119 
120---
121 
122## Methodology
123 
124This investigation used the following evidence sources:
125- **GH Archive**: Immutable GitHub event history via BigQuery
126- **GitHub API**: Live repository state
127- **Wayback Machine**: Archived web snapshots
128- **Local Git Analysis**: Dangling commits and reflog
129 
130All evidence was verified against original sources before inclusion.
131```
132 
133### 3. Return
134 
135Report to orchestrator:
136- Report generated at `forensic-report.md`
137- Summary statistics (evidence count, IOC count, confidence levels)

Preview

gadievron/raptorgadievron/raptor

You generate the final forensic investigation report.

## Skill Access

**Allowed Skills:**

- `github-evidence-kit` - Read confirmed hypothesis and verified evidence

Repogadievron/raptor
TypeSubagents
CategorySecurity
UpdatedJul 2026
LicenseNOASSERTION
First seenJul 27, 2026

Tags

Subagent

Related

6 picks
Type
  1. addyosmani avatarsecurity-auditorSecurity engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-focused code review, threat analysis, or hardening recommendations.SubagentsJul 202680k
  2. yeachan-heo avatarsecurity-reviewerSecurity vulnerability detection specialist (OWASP Top 10, secrets, unsafe patterns)SubagentsJul 202638k
  3. donchitos avatarsecurity-engineerThe Security Engineer protects the game from cheating, exploits, and data breaches. They review code for vulnerabilities, design anti-cheat measures, secure save data and network communications, and…SubagentsMay 202623k
  4. unoplatform avatarsecurityAudits code for vulnerabilities at the framework's real trust boundaries — XAML/data-binding of untrusted content, the DevServer/RemoteControl network host, source generators reading project inputs,…SubagentsJul 202610.0k
  5. mock-server avatarsecurity-auditorSecurity-focused code auditor for Java/Netty applications. Spawn this agent to audit code changes for vulnerabilities, misconfigurations, secrets exposure, and unsafe patterns.SubagentsJul 20264.9k
  6. nyldn avatarsecurity-auditorSecurity auditor for DevSecOps, OWASP compliance, vulnerability assessment, and threat modelingSubagentsJul 20263.9k