Best supply chain security skills, page 5

Generate an AI SBOM declaration for a PR description. An agent skill from openshift-eng/ai-helpers.

openshift-eng/ai-helpers

Risk-based vendor assessment framework for IT service providers, technology vendors, and third-party partners under DORA, NIS2, GDPR.

lawve-ai/awesome-legal-skills

Coordinate an authorized software-supply-chain audit from dependency resolution through build, artifact, release, deployment, and runtime trust.

cyberful/cyberful

Open security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS…

LeoYeAI/openclaw-master-skills

AI compliance and policy engine — evaluate scan results against OWASP, NIST, SOC 2, ISO 27001, CMMC, EU AI Act, AISVS v1.0, and related frameworks.

LeoYeAI/openclaw-master-skills

Open security platform for agentic infrastructure — checks packages for CVEs (OSV, NVD, EPSS, KEV), scans container images, verifies provenance, scans filesystems, and generates SBOMs.

LeoYeAI/openclaw-master-skills

Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.

BagelHole/DevOps-Security-Agent-Skills

Open-source security forensics - analyze repositories, dependencies, and code for malicious patterns, supply chain risks, and vulnerabilities.

AlexAI-MCP/hermes-CCC

Operations excellence expertise for supply chain optimization, process improvement (Lean, Six Sigma), capacity planning, vendor management, quality assurance, and operational efficiency.

travisjneuman/.claude

Owns execution: how work actually gets done across the organization, including process, program management, capacity, vendors, supply chain, and service delivery.

cbrock84/headcount

Audit a JavaScript/TypeScript repo's npm, yarn, or pnpm configuration for supply-chain hardening: tool version, lifecycle scripts, unsafe dependency protocols, and minimum release age ≥3 days.

grafana/skills

开源许可证合规检查——对依赖列表、单个库或对外发布代码. An agent skill from zhou210712/claude-for-legal-ZH.

zhou210712/claude-for-legal-ZH

Supply chain mapping, supplier dependency analysis, customer concentration, geographic concentration, bottleneck identification, supply chain risk, logistics network, sourcing strategy, inventory…

agentii-ai/agentii-investment-intelligence

Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains.

lawve-ai/awesome-legal-skills

Write up a supply chain disruption — port delay, carrier failure, customs hold, or in-transit damage — as a decision-ready incident report.

mohitagw15856/pm-claude-skills

Dependency gatekeeper. An agent skill from ccplugins/awesome-claude-code-plugins.

ccplugins/awesome-claude-code-plugins

Look up every package this repository publishes across all registries via packages.ecosyste.ms, with downloads, dependent counts, latest version, registry URL and supply-chain risk flags.

alpha-omega-security/scrutineer

Add an SBOM Policy Enforcement (SscaEnforcement / CdSscaEnforcement) step to an existing Harness pipeline to verify SBOM attestations and apply OPA SBOM policy sets.

harness/harness-skills

Add an SLSA Verification (SlsaVerification) step to an existing Harness pipeline to verify SLSA provenance attestations and optionally enforce OPA policy sets on provenance data.

harness/harness-skills

Add a SLSA Generation step (YAML type: provenance) to an existing Harness pipeline to generate SLSA provenance and optionally attest with Cosign (keyless, key-based, or Vault).

harness/harness-skills

Analyze and mitigate the bullwhip effect where demand variability amplifies upstream in supply chains.

asgard-ai-platform/skills

Net-zero transition playbook: GHG inventory (ISO 14064-1, GHG Protocol Scope 1/2/3), science-based targets (SBTi), TCFD and ISSB S1/S2 climate disclosure, Taiwan carbon fee, decarbonization roadmap…

asgard-ai-platform/skills

Analyze supply chain operations using the SCOR model across Plan, Source, Make, Deliver, and Return processes.

asgard-ai-platform/skills

Analyze Taiwan's manufacturing industry structure including semiconductor, electronics, machinery, and petrochemical sectors.

asgard-ai-platform/skills

Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks, CI install checks, and optional incident…

instructa/agent-skills

Turn an investment agent into a supply-chain bottleneck hunter.

aiskillstore/marketplace

Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or…

sundial-org/awesome-openclaw-skills

Audits dependency supply chains for bad versions, lockfile drift, and artifact integrity.

athola/claude-night-market

Screen a weather- or event-triggered demand spike for Amazon product opportunities by checking local supply-capacity gaps, installation or usage-friction barriers, and one's own supply-chain…

xjli360/sealeap-amazon-skills

Scan project dependencies for known vulnerabilities, generate software bills of materials, and enforce license compliance across the software supply chain.

seb1n/awesome-ai-agent-skills

Rust security skill for supply chain safety and memory-safe development.

mohitmishra786/low-level-dev-skills

Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation

majiayu000/claude-skill-registry

Supply Chain Bottleneck Analyzer for TikTok Shop sellers. An agent skill from majiayu000/claude-skill-registry.

majiayu000/claude-skill-registry

This skill should be used when the user asks to "review Dependabot alerts", "check for vulnerable dependencies", "audit third-party packages", "assess supply chain risk", "run an Aikido scan", or…

bitwarden/ai-plugins

Sustainability and ESG expertise for ESG strategy, carbon footprint management, sustainable supply chains, circular economy, renewable energy, climate risk, and ESG reporting (GRI, SASB, TCFD).

travisjneuman/.claude

Selects and implements NestJS runtime features, error and API contracts, security, testing, DevOps, performance, and safe scale.

aiskillstore/marketplace

Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit.

secondsky/claude-skills

Semantic search over critical minerals PDF corpus — rare earth, lithium, cobalt, nickel supply chain, trade policy, extraction, and materials research via Pinecone

lamm-mit/scienceclaw

Query and analyze structured CSV datasets on critical minerals production, trade, and supply chains

lamm-mit/scienceclaw

Compute supply chain risk metrics for critical minerals — HHI concentration, net import reliance, top-3 share, and trend analysis

lamm-mit/scienceclaw

Expert knowledge for Azure Firmware Analysis development including best practices, security, integrations & coding patterns, and deployment.

MicrosoftDocs/Agent-Skills