Agent Skills: supply-chain-defense

Behavioural-first defense against poisoned npm/PyPI packages in the publish-to-advisory window CVE tools miss. Use before every install or version bump: 7-day cooldown gate, Socket.dev behavioural score, stale-OIDC audit, publish-token rotation, and a worm-persistence self-scan.

UncategorizedID: 0xdarkmatter/claude-mods/supply-chain-defense

Author

claude-mods

https://github.com/claude-mods View all skills

Repository

0xdarkmatter/claude-mods

0xDarkMatterLicense: MIT

255

Install this agent skill to your local

pnpm dlx add-skill https://github.com/0xdarkmatter/claude-mods/supply-chain-defense

Skill Files

Browse the full folder contents for supply-chain-defense.

Download Skill

Loading file tree…

Select a file to preview its contents.