Description
opensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise stage verifies that the copy is clean. The package stage adds a CLAUDE.md file, a setup script and a README. The skill is triggered when a user says to open source a project or make it public, wants to prepare a private repository for release, needs to remove secrets before pushing to GitHub, or invokes its /opensource fork, verify or package commands. Its three stages run as separate agents, named forker, sanitizer and packager, as the listing describes. The aim is to stop credentials and private material leaking when a repository goes public. A skill is a SKILL.md file of instructions that an AI agent loads when a task calls for it. It is free and open source, and the skills.sh listing shows all three security audits passing.…
Highlights
- Fork, sanitise and package stages
- Strips secrets before publication
- Verify command to confirm a clean copy
- Adds CLAUDE.md, setup script and README
Ratings & Reviews
No ratings yet
Be the first to rate opensource-pipeline.
People also visit
defi-amm-security
Security checklist for Solidity AMM contracts, liquidity pools, and swap flows
django-security
Django security best practices, authentication, authorization, CSRF protection
enterprise-agent-ops
Operational controls for long-lived or cloud-hosted agent systems
opensource-pipeline FAQ
What does the opensource-pipeline skill do?
It takes a private project through fork, sanitise and package steps so it can be published without secrets or private material.
What does it add to the project?
A CLAUDE.md file, a setup script and a README, in the package stage.
How is it run?
Through commands such as /opensource fork, /opensource verify and /opensource package, or by asking to open source a project.
How do I install it?
Run: npx skills add https://github.com/affaan-m/ecc --skill opensource-pipeline
Is it free?
Yes. It is free and open source.
Are there security findings?
The skills.sh listing shows Gen Agent Trust Hub, Socket and Snyk all passing.
What are the best opensource-pipeline alternatives?
Popular alternatives to opensource-pipeline include 1password, healthcheck and canary-watch. See all opensource-pipeline alternatives