Supply chain security

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security.

aiskillstore/marketplace

A skill your agent uses when the user says 'dependency audit', 'npm audit', 'pip audit', 'cargo audit', 'security vulnerabilities', 'outdated packages', 'supply chain', or needs to scan project…

cwinvestments/memstack

A skill your agent uses when an open-source developer tool, package, CLI, agent, or MCP server must be evaluated for legitimacy, supply-chain risk, telemetry, dangerous capabilities, claim accuracy…

asimons81/hermes-field-kit

Security: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.

notque/vexjoy-agent

Create OPA governance policies for Harness via MCP. An agent skill from harness/harness-skills.

harness/harness-skills

CI/CD pipeline security, supply chain security, SLSA compliance, artifact signing, dependency scanning

Hack23/cia

DevSecOps, container, and API operational defensive security reference: CI/CD pipeline hardening, secret scanning, IaC misconfiguration detection, SAST/DAST integration, container image scanning…

modu-ai/moai-adk

Software supply-chain defensive security reference: SBOM generation and verification (SPDX / CycloneDX), dependency-confusion defense, malicious-package triage playbook, SLSA provenance levels…

modu-ai/moai-adk

A skill your agent uses when reviewing, designing, or modifying Java enterprise systems from a maintainer-authored or maintainer-sanitized NIS2 engineering evidence inventory.

jabrena/plinth

A skill your agent uses when reviewing, designing, or modifying Java enterprise products, services, libraries, agents, plugins, connected components, or platform modules that may qualify as products…

jabrena/plinth

Test application security against OWASP Top 10 (2025) with automated CI tooling: OWASP ZAP (DAST), dependency/supply-chain scanning (OSV-Scanner, SBOM, provenance), Semgrep SAST, auth/session tests…

petrkindlmann/qa-skills

Software Composition Analysis: find vulnerable dependencies, correlate CVE/GHSA/OSV across ecosystems, generate CycloneDX/SPDX SBOMs, assess license compliance, and run reachability-aware triage to…

hardw00t/ai-security-arsenal

External recon for software supply-chain attack surface. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Detect and prevent dependency confusion (public-over-private package name resolution) in npm, PyPI, and Maven by enumerating claimable internal package names with tools like confused and OWASP…

mukul975/Anthropic-Cybersecurity-Skills

Triage npm packages and lockfiles for install-script malware, credential exfiltration, and worming behavior using GuardDog, manual tarball inspection, and dynamic detonation with network/filesystem…

mukul975/Anthropic-Cybersecurity-Skills

Build a dependency-tree map of a project (npm or Python) and trace the path from each known-vulnerable transitive package back to one or more direct dependencies.

jeremylongshore/tons-of-skills-marketplace

Interactive supply chain dashboard mapping suppliers, customers, and financial interdependencies

daloopa/investing

Security engineering router for penetration testing, code auditing, red/blue/purple team operations, threat intelligence, and vulnerability research.

telagod/code-abyss

Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky code paths before or during implementation.

majiayu000/spellbook

Inventory, assess, update, and validate third-party dependencies across Bun, Python/uv, Cargo, Docker, and GitHub Actions without hiding ecosystem or supply-chain risk.

stella/stella

Weekly. An agent skill from markfulton/ai-employees.

markfulton/ai-employees

Periodic security sweep of Atlas in four areas (MCP and CLI, the Tauri desktop shell, the web renderer and connectors, the supply chain and CI) that follows untrusted input to what it can reach…

wlsdks/ontology-atlas

Defensive security engineering judgment, distilled from a stronger model - invoke when THREAT MODELING a system or feature; making security-relevant design decisions (auth, crypto, trust boundaries…

telagod/code-abyss

Scan project dependencies for vulnerabilities, license issues, and upgrade opportunities across Python, Node.js, Go, and Rust.

borghei/Claude-Skills

NIS2 Directive (EU 2022/2555) compliance for critical infrastructure entities, covering the 10 minimum security measures.

borghei/Claude-Skills

A skill your agent uses when auditing project dependencies for known vulnerabilities, supply chain risk, or provenance issues — covers Go modules, Maven/JVM, and CI integration for automated scanning

Habitat-Thinking/ai-literacy-superpowers

A skill your agent uses when reviewing GitHub Actions workflow files for security issues, hardening CI pipelines, or assessing supply chain risk in a repository that uses GitHub Actions

Habitat-Thinking/ai-literacy-superpowers

Audit dependency manifests and lockfiles for SBOM extraction, risky install scripts, unpinned versions, remote/git dependency sources, dependency-confusion and typosquat/known-malicious package…

ptn1411/skill

Draft, adapt, and review contracts and clauses aligned with The Chancery Lane Project's methodology for reducing carbon emissions through legal agreements.

lawve-ai/awesome-legal-skills

NIS2 Compliance Navigator — scope classification, Art. An agent skill from lawve-ai/awesome-legal-skills.

lawve-ai/awesome-legal-skills

Audit local AI model, adapter, tokenizer, configuration, and packaging artifacts for provenance, integrity, dependency, serialization, license, and loading-risk evidence.

cyberful/cyberful

Audit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs.

oliver-kriska/claude-elixir-phoenix

Run evidence-backed workflows for supply chain, dependency neighborhoods, architecture, performance, unsafe and ownership review, upgrades, and ecosystem integration.

richlander/dotnet-inspect

Manages the flow of goods and inputs — sourcing, inventory, lead times, fulfillment, and supply risk.

cbrock84/headcount

Supply Chain Bottleneck Analyzer for Shopify/DTC stores. An agent skill from nexscope-ai/eCommerce-Skills.

nexscope-ai/eCommerce-Skills

Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers.

nexscope-ai/eCommerce-Skills

Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation

nexscope-ai/eCommerce-Skills

Supply Chain Bottleneck Analyzer for TikTok Shop sellers. An agent skill from nexscope-ai/eCommerce-Skills.

nexscope-ai/eCommerce-Skills

A skill your agent uses whenever reasoning about manufacturing, scaling production, pricing strategies, operational efficiency, vertical integration, or labor compensation.

K-Dense-AI/mimeographs

A skill your agent uses whenever you need to reason like John D.

K-Dense-AI/mimeographs

Open source governance, security posture badges, license compliance, SBOM generation, and vulnerability management for transparency-driven development

Hack23/cia

Audits direct and transitive dependencies for license compliance, maintenance health, CVEs, abandoned packages, and bloat.

Mathews-Tom/armory

Apply rigorous supply chain security hygiene to software projects — audit dependencies, detect risks, minimize attack surface.

LearnPrompt/andrej-karpathy-skills

Per-language dependency vulnerability audit tool reference (cargo audit/deny, pip-audit, npm/pnpm audit, govulncheck, bundler-audit, composer audit, OWASP dependency-check, dotnet vulnerable…

Goldziher/ai-rulez

Security guardrails for Envilder (CLI, GitHub Action, SDKs, CDK, website).

macalbert/envilder

Industry and market research. An agent skill from brycewang-stanford/Auto-Empirical-Research-Skills.

brycewang-stanford/Auto-Empirical-Research-Skills

A skill your agent uses when positioning a Journal of Operations Management (JOM) manuscript within the operations and supply chain management conversation — joining a live OM/SCM debate…

franklee16/academic-research-skills

A skill your agent uses when targeting Journal of Operations Management (JOM) or deciding whether an empirical / survey-based / behavioral operations-and-supply-chain manuscript fits this venue.

franklee16/academic-research-skills