# Open Source Security Foundation (OpenSSF) AI Agent Skills

Open Source Security Foundation (OpenSSF) publishes official AI agent skills for its tools, services, and developer workflows.

Browse 2 official AI agent skills across 1 Open Source Security Foundation (OpenSSF) repository, with install commands and source links.

Official page: https://skillscout.sh/official/ossf/
Markdown page: https://skillscout.sh/official/ossf/ossf_skills_skillscout.md
Vendor website: https://openssf.org/

## Prompt for your agent

Fetch this Markdown manifest as plain text: https://skillscout.sh/official/ossf/ossf_skills_skillscout.md. If your browser cannot display the Markdown directly, use curl or another text fetcher. Recommend the relevant Open Source Security Foundation (OpenSSF) skills package or packages for my goal, explain which individual skills matter, and wait for my approval. After I approve, install with the npx command. If no project is open, install it as an agent skill I can use later.

## Skills packages

### ossf/oss-crs

Includes 2 official skills: sync-dependabot-app-deps, sync-dependabot-pins.

Install:

```bash
npx skills add ossf/oss-crs -y
```

Source: https://github.com/ossf/oss-crs

## Individual skills

### sync-dependabot-app-deps

Official Open Source Security Foundation (OpenSSF) skill from ossf/oss-crs.

Install:

```bash
npx skills add ossf/oss-crs@sync-dependabot-app-deps -y
```

Package: ossf/oss-crs
Source: https://github.com/ossf/oss-crs/tree/main/.claude/skills/sync-dependabot-app-deps

### sync-dependabot-pins

Official Open Source Security Foundation (OpenSSF) skill from ossf/oss-crs.

Install:

```bash
npx skills add ossf/oss-crs@sync-dependabot-pins -y
```

Package: ossf/oss-crs
Source: https://github.com/ossf/oss-crs/tree/main/.claude/skills/sync-dependabot-pins

## ossf/oss-crs package overview

Includes 2 official skills: sync-dependabot-app-deps, sync-dependabot-pins.

### Top skills in this package

- sync-dependabot-app-deps: Official Open Source Security Foundation (OpenSSF) skill from ossf/oss-crs.
- sync-dependabot-pins: Official Open Source Security Foundation (OpenSSF) skill from ossf/oss-crs.

### Install

Install the full package:

```bash
npx skills add ossf/oss-crs -y
```

Install a specific skill:

```bash
npx skills add ossf/oss-crs@sync-dependabot-app-deps -y
```

Use the package when you want your agent to choose the relevant skill from this official repository.

Source: https://github.com/ossf/oss-crs#readme