sammyboi81

Supply Chain Security — Security skill for Claude Code

Security community

Stop malicious or vulnerable dependencies - lockfiles, malware feeds, age gates, SBOM, provenance, typosquatting.

How to install Supply Chain Security

Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-supply-chain-security/SKILL.md

Terminal

mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-supply-chain-security && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/supply-chain-security.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-supply-chain-security/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Supply Chain Security does

name: supply-chain-security description: Stop malicious or vulnerable dependencies - lockfiles, malware feeds, age gates, SBOM, provenance, typosquatting. tags: supply-chain, core, breach

Package registries are attacked at industrial scale (Aikido reports its Intel feed flags up to ~100,000 malicious packages a day across ecosystems; worms have hit npm; trusted tooling itself was compromised in the March 2026 Trivy incident).

Before adding a dependency

Do you need it? Fewer, smalle

Alternatives in Security

Security Guardian — Comprehensive security analysis for RTK CLI tool, focusing on command injection, shell escaping, hook security 11.9k ★
Query Token Audit — Audit token security to detect scams, honeypots, and malicious contracts across BSC, Base, Solana, and Ethereu 483 ★
Agentseal — Security toolkit for AI agents 344 ★