{
  "$schema": "https://agentskills.io/schemas/v0.2.0/index.json",
  "version": "0.2.0",
  "publisher": {
    "name": "Pipefort",
    "url": "https://pipefort.com"
  },
  "skills": [
    {
      "name": "scan-repo",
      "type": "skill",
      "description": "Scan a public GitHub repository's CI/CD workflows against ~74 deterministic rules mapped to the OWASP CI/CD Top 10, and interpret the result honestly \u2014 including what the free scan does not cover.",
      "url": "https://pipefort.com/.well-known/agent-skills/scan-repo/SKILL.md",
      "sha256": "76062893b6d15dd247812708d03acf91188ff02bb9dfca3910cee67ae98ed5ed"
    },
    {
      "name": "vet-action",
      "type": "skill",
      "description": "Check a third-party GitHub Action's security score, maintenance status, and supply-chain risk signals before adding it to a workflow, and get the commit SHA to pin it to.",
      "url": "https://pipefort.com/.well-known/agent-skills/vet-action/SKILL.md",
      "sha256": "db9abad95dae8d8715fd6df8650e3eac7362803afc31e16bb1a30a9995dc3c18"
    },
    {
      "name": "harden-workflow",
      "type": "skill",
      "description": "Rewrite a GitHub Actions workflow file with security fixes applied \u2014 SHA-pinning, least-privilege permissions, timeouts \u2014 using a preview-then-apply protocol.",
      "url": "https://pipefort.com/.well-known/agent-skills/harden-workflow/SKILL.md",
      "sha256": "1267bb03d454f300e249d82026d10215abbacd9bdc31a35b80d392b21769bb79"
    }
  ]
}