Agent Skills: npm-supply-chain-check
Detect known malicious npm package versions and install-time supply-chain indicators in repositories, lockfiles, and node_modules. Use when a user mentions an npm compromise, Shai-Hulud, the Keyv/cacheable incident, suspicious preinstall scripts, credential-stealing packages, or asks whether a JavaScript project was exposed to a package supply-chain attack. Do not use as a general CVE or license audit.
ID: majiayu000/claude-arsenal/npm-supply-chain-check
28026
Install this agent skill to your local
Skill Files
The files that make up npm-supply-chain-check.
More agent skills
- applying-brand-guidelinesThis skill applies consistent corporate branding and styling to all generated documents including colors, fonts, layouts, and messaging
- domain-driven-designModel business domains using DDD tactical and strategic patterns
- polli-videoRecord terminal demo videos of the polli CLI using VHS (charmbracelet) with polli-generated voiceover and background music. Ships a working `example/demo.tape` + `example/render.sh` pipeline. Use when the user asks to make, record, or iterate on a polli demo video, LinkedIn/social clip of the CLI, or any terminal screencast for pollinations.
- agent-architecture-auditエージェントおよび LLM アプリケーション向けのフルスタック診断。12 層のエージェントスタックにおけるラッパーリグレッション、メモリ汚染、ツール規律の失敗、隠れた修復ループ、レンダリング破損を監査します。重要度順の発見事項とコードファーストの修正を生成します。エージェントアプリケーション、自律ループ、または LLM を活用した機能を構築する開発者に必須です。
- audiobookCreate audiobooks from web content or text files. Handles content fetching, text processing, and TTS conversion with automatic fallback between ElevenLabs, OpenAI TTS, and gTTS.
- openclaw-secret-scanning-maintainerTriage, redact, clean up, and resolve OpenClaw GitHub Secret Scanning alerts in issues or PRs.