DevInder1

DevInder1/supply-chain-scanner-public

Cursor rule Cursor

TridentChain Security — supply-chain vulnerability scanning for this workspace.

DevInder1/supply-chain-scanner-public

MCP server Claude CodeCodexCursor +2

MCP server "tridentchain" as configured in DevInder1/supply-chain-scanner-public. Runs tridentchain_mcp with python3.

DevInder1/supply-chain-scanner-public

Plugin Claude Code

Comprehensive local supply-chain CVE scanning — project deps, system packages (Homebrew/apt), AND IDE extensions (VS Code, JetBrains) — with EPSS exploit-probability and CISA KEV prioritisation. Includes validate-after-patch workflow to confirm fixes. Local-first; no source code leaves the user's machine. Complements…

DevInder1/supply-chain-scanner-public

Skill Claude CodeCodex

Generate an EPSS/KEV-prioritised remediation plan from a scan. Returns the top findings ranked by real-world exploitation risk with copy-paste upgrade commands, semver-jump risk classification (PATCH/MINOR/MAJOR), and a recommendation per package. Use when the user asks for "what should I fix first", "remediation…

DevInder1/supply-chain-scanner-public

Skill Claude CodeCodex

Fast cached-only scan of project dependencies for high-severity CVEs. Uses the local advisory cache without making fresh network calls — sub-second for most projects. Use when the user wants a pre-commit check, a fast pulse on supply-chain risk, or is offline. For thorough live-advisory checks use scan or…

DevInder1/supply-chain-scanner-public

Skill Claude CodeCodex

Comprehensive scan covering project dependencies PLUS OS/system packages (Homebrew on macOS, apt/dnf on Linux) PLUS installed IDE extensions (VS Code marketplace + JetBrains plugins). Most other supply-chain scanners only check project manifests and miss system + IDE surfaces. Use whenever the user asks for "complete…

DevInder1/supply-chain-scanner-public

Skill Claude CodeCodex

Full project dependency scan with live advisory fetch (OSV, NVD, GHSA) and EPSS exploit-probability + CISA KEV prioritisation. Covers npm and PyPI manifests + lockfiles. Use when the user wants thorough, up-to-date supply-chain CVE coverage for their project — but does NOT need system packages or IDE extensions (for…

DevInder1/supply-chain-scanner-public

Skill Claude CodeCodex

Scan a workspace for supply-chain CVEs across project dependencies, system packages (Homebrew/apt), and IDE extensions (VS Code, JetBrains). Findings ranked by EPSS exploit probability and CISA KEV presence — not just CVSS severity. Use when the user asks about supply-chain risk, dependency vulnerabilities, or wants…

DevInder1/supply-chain-scanner-public

Skill Claude CodeCodex

Re-scan after a dependency upgrade and confirm the CVEs are actually resolved. Use when the user has just run npm update, pip install -U, applied a patch, or otherwise upgraded packages and wants verification. Diffs a baseline scan against the post-patch scan and reports resolvedcount, remainingcount, newcount, and…

DevInder1/supply-chain-scanner-public

Skill Claude CodeCodex

Explain why a specific vulnerable package is in the project — direct vs transitive dependency, which CVE IDs apply, EPSS exploit-probability score, whether it's on the CISA KEV catalog, and the recommended fix command. Use when the user asks "why is X vulnerable", "where does X come from", or "is X actually…

DevInder1/supply-chain-scanner-public

MCP server Claude CodeCodexCursor +2

MCP server for TridentChain Security — Claude, Cursor, and other MCP hosts. Runs locally from the tridentchain-mcp Python package.