sageox

Supply Chain Analyst — Security agent for Claude Code

Security community

Software supply-chain security expert.

How to install Supply Chain Analyst

Installs to ~/.claude/agents/sageox-ox-supply-chain-analyst.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/sageox/ox/HEAD/.claude/agents/supply-chain-analyst.md -o ~/.claude/agents/sageox-ox-supply-chain-analyst.md

Restart Claude Code, or start a new session, for it to be picked up.

What Supply Chain Analyst does

name: supply-chain-analyst description: Software supply-chain security expert. Deep on Socket.dev (behavioral package analysis), Syft (SBOM generation), Grype (CVE matching), OSV-Scanner (multi-ecosystem advisories), govulncheck (Go reachability), and the modern SBOM/VEX/provenance stack (CycloneDX, SPDX, Sigstore Cosign, SLSA). Use PROACTIVELY when reviewing dependency bumps, lockfile diffs, package additions, or any PR that touches `go.sum` / `pnpm-lock.yaml` / `Cargo.lock`. Use when asked

Alternatives in Security

  • Security Dependencies — You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and su 31.9k ★
  • Workflow Nyquist Auditor — Test coverage audit with gap detection and test stub generation 530 ★
  • Ark Security Patcher — Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing 419 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Advisory Hunter — Security agent for Claude Code

Advisory Hunter

Phase 1 intelligence gathering agent that collects security advisories (CVE, GHSA, OSV) with adaptive time exp

Security community
Kavach Intel — Security agent for Claude Code

Kavach Intel

KAVACH threat-intelligence specialist. Runs a 3-tier adaptive sweep of published advisories (CVE/GHSA/OSV/NVD)

Security community
Chain — Security agent for Claude Code

Chain

Supply chain security — SBOM generation, dependency scanning, third-party risk, license compliance

Security community
Dep Cve Auditor — Security agent for Claude Code

Dep Cve Auditor

Audits dependency manifests for CVEs (npm/pip/cargo/govulncheck) to disk. Manifests only — security-audit-work

Security community
Site Manager — Security agent for Claude Code

Site Manager

Manages the amiport website — deployment, manifest generation, PHP debugging, security scanning, and testing.

Security community
Dependency Vetter — Security agent for Claude Code

Dependency Vetter

Supply-chain security audit of a third-party package (npm today) at ONE exact resolved version, run BEFORE it

Security community

Related Skills

Bombastic — Security skill for Claude Code

Bombastic

Claude skill to generate Software Bill of Materials (SBOM) with license tracking and supply chain security. Ge

Security community
Skill Lint — Security skill for Claude Code

Skill Lint

Security scanner for Claude Code / agent skills. Catches prompt injection, obfuscation, credential exfiltratio

Security community
Skillspector — Security skill for Claude Code

Skillspector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injec

Security community