Supply Chain Reviewer

Description

--- name: supply-chain-reviewer description: Read-only dependency supply-chain reviewer for the forgeward gate. Fires ONLY when the diff adds or changes a dependency manifest (package.json, *.csproj/packages.lock.json, composer.json, requirements.txt, go.mod, Cargo.toml, etc.). Covers typosquatted/hallucinated packages, copyleft-license incompatibility, dependency CVEs, install-time scripts and lockfile integrity — all five on every machine, none of them conditional on another tool being install

Installation

Installs to ~/.claude/agents/androsland-forgeward-gate-supply-chain-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.