sageox

Supply Chain Analyst

Name: Supply Chain Analyst
Author: sageox

Security community

SOURCE https://github.com/sageox/ox/blob/main/.claude/agents/supply-chain-analyst.md

Description

--- name: supply-chain-analyst description: Software supply-chain security expert. Deep on Socket.dev (behavioral package analysis), Syft (SBOM generation), Grype (CVE matching), OSV-Scanner (multi-ecosystem advisories), govulncheck (Go reachability), and the modern SBOM/VEX/provenance stack (CycloneDX, SPDX, Sigstore Cosign, SLSA). Use PROACTIVELY when reviewing dependency bumps, lockfile diffs, package additions, or any PR that touches `go.sum` / `pnpm-lock.yaml` / `Cargo.lock`. Use when asked

Installation

Installs to ~/.claude/agents/sageox-ox-supply-chain-analyst.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/sageox/ox/HEAD/.claude/agents/supply-chain-analyst.md -o ~/.claude/agents/sageox-ox-supply-chain-analyst.md

Restart Claude Code, or start a new session, for it to be picked up.