76 tagged supply-chain, measured the same way as everything else here.
Browse within: sbom 16bug-bounty 15cybersecurity 13cursor 10agents 9autonomous-pentesting 9CVE 8dependencies 8dependency-confusion 8sigstore 8software-integrity 8ai-security 7devsecops 7grype 7
CyberStrategyInstitute/ai-safe2-framework
Skill Claude CodeCodex
Apply AI SAFE2 v3.1 to design, build, audit, test, and govern AI agents, multi-agent systems, RAG, MCP/tool integrations, and AI infrastructure. Use the 161-control core taxonomy plus applicable profile overlays such as CP.5.MCP MCP-1 through MCP-19. Classify autonomy with ACT tiers, enforce HEAR and replication…
Skill Claude CodeCodex
Business process analysis, requirements documentation, and workflow optimization for retail, supply chain, and technology organizations.
leospark/serenity-chokepoint-investing-skills
Skill Claude CodeCodex
Analyze public equities and sectors using the Serenity-style AI supply-chain chokepoint investing framework. Best for AI infrastructure, semiconductors, optical communications, data center power, storage, cooling, robotics, and industrial supply-chain bottleneck research.
Skill Claude CodeCodex
A set of instructions for researching investment opportunities using bottleneck theory. The method looks for lower-level suppliers that larger technology companies cannot easily replace.
Skill Claude CodeCodex
Set up and operate Trustcard gates for MCP coding tools, explain tool denials, check manifest drift and expiry, renew unchanged contracts, and inspect local tool access. Use for Trustcard or MCP tool governance requests.
Skill Claude CodeCodex
Run TaskBounty's local GitHub Actions / CI maintenance-hygiene check, interpret the findings, and draft a fix plan. Use when a user wants to review a repo's GitHub Actions workflows for third-party action pinning, workflow token permissions, or update-automation gaps before shipping. Scope is CI/workflow hygiene only…
Dailyaiagents/daily-ai-agent-toolkit
Skill Claude CodeCodex
Verify that declared deliverable files exist, are non-empty, remain inside an allowed root, and avoid declared placeholder terms.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: