software-supply-chain skills

15 tagged software-supply-chain, measured the same way as everything else here.

Browse within: package-management 14

supply-chain-guard

01

ZarK/ai-supply-chain-guard

Skill Claude CodeCodex

Use before installing, updating, auditing, or executing dependencies, package-manager commands, project generators, CI actions/workflows, release jobs, IDE extensions, MCP servers, or AI-agent tools. Also use when investigating suspected compromise or advisories, debugging publish or release authentication, or…

14 3d ago A 71 tokens original MIT

audit

02

git-pkgs/skills

Skill Claude CodeCodex

Scan dependencies for known vulnerabilities using OSV, check provenance attestations, and find deprecated or yanked versions. Use when checking for CVEs, reviewing security posture, or investigating who introduced or fixed a vulnerable dependency.

1 13d ago A 45 tokens original MIT

evaluate

03

git-pkgs/skills

Skill Claude CodeCodex

Evaluate a package before adding it as a dependency. Checks registry metadata, adoption, maintenance, security posture, and license. Use when assessing whether a package is trustworthy, comparing alternatives, or reviewing a new dependency.

1 13d ago A 44 tokens original MIT

forge

04

git-pkgs/skills

Skill Claude CodeCodex

Interact with GitHub, GitLab, Gitea, Forgejo, Codeberg, Bitbucket, Gerrit, and Tangled repositories through one CLI. Use instead of gh or glab when the git remote is not github.com, when working against a self-hosted forge, or when the same workflow needs to run unchanged across forges. Covers pull/merge requests…

1 13d ago A 95 tokens original MIT