ariffazil/GitHub Forensics & Blame
skills/_retired/ARCHIVE-dupe-2026-07-12/root_.agents_skills/FORGE-github/12-forensics-blame/SKILL.md
Blame is lineage tracing. Essential for accountability.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace GitHub Forensics & BlameInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 11, 2026, 3:54 AM221.2s1 file scanned
SKILL.md
- id:
- forensics-blame
- name:
- GitHub Forensics & Blame
- version:
- 1.0.0
- description:
- Blame is lineage tracing. Essential for accountability.
- owner:
- AAA
- risk_tier:
- low
- glyph:
- 🜌
- position:
- 12 of 12 in the GitHub Canon
- language:
- true
- math:
- false
- physics:
- false
- skills:
- []
- schema_version:
- 1
- artifact_hash:
- e7ea79ce48facb3d
- autonomy_tier:
- T1
🜌 12. GitHub Forensics & Blame
"Blame is lineage tracing. Essential for accountability." — AAA GitHub Canon, position 12 of 12
Purpose
Trace who changed what, when, and why. Use blame to debug regressions. Use bisect to find the breaking commit.
When to Use
- When debugging a regression — when did this line change?
- When investigating a security incident — who introduced the vulnerable code?
- When understanding codebase history before refactoring
- When performing a post-mortem (incident → root cause → commit → actor)
When NOT to Use
- Do NOT use blame as personal attack (it's a tool, not a verdict)
- Do NOT bisect on dirty trees (clean first)
Procedure
- Blame:
git blame <file>(line-by-line: commit, author, timestamp) - Blame specific lines:
git blame -L 10,20 <file> - Log with file history:
git log --follow -- <file> - Pickaxe:
git log -S '<string>' --oneline(find when a string was added/removed) - Bisect:
git bisect start→git bisect bad→git bisect good <known-good-sha>→ test each commit →git bisect reset - For constitutional forensics: cross-reference with VAULT999 seal IDs
Allowed Tools
| Tool | Purpose |
|---|---|
| forge_git_log | forensics-blame operation |
| forge_git_diff | forensics-blame operation |
| forge_filesystem_read | forensics-blame operation |
Forbidden Actions
- NEVER weaponize blame in PR reviews (focus on the code, not the author)
- NEVER bisect without a known-good commit
- NEVER rely on blame for legal attribution — use VAULT999 seals for that
Output
Commit history + actor list + line-level provenance + (optional) bisect-verified breaking commit
Sibling Skills
tagging-releasesgithub-runbook
Position 12 of 12 in the AAA GitHub Canon. Sovereign ruling 2026-06-24. Consolidates and supersedes prior GitHub-related skills in the federation. License: AGPL-3.0 · Sovereign: Arif bin Fazil DITEMPA BUKAN DIBERI
Related Skills
ariffazil/XAUUSD-trading-stack
development
VerifiedTrustedCommunity
Federation-wide gold (XAUUSD) trading capability. Python stack, OANDA broker, backtesting, macro signals, RSI strategy. Every organ has a role.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/wealth-claim-state
development
VerifiedTrustedCommunity
Capital claim state management — tracks claim lifecycle across WEALTH organ.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga-constitutional
development
VerifiedTrustedCommunity
Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga
testing
VerifiedTrustedCommunity
Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.
2SKILL.mdUpdated Jul 24, 2026