Supply Chain Guard

Automated detection and remediation of software supply chain attacks across npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines. Built from real-world attack intelligence gathered through March 31, 2026.

When to Use This Skill

Use this skill when:

• The user asks to audit a project's dependencies for security issues
• Before deploying code to production
• When investigating a potential supply chain compromise
• When the user mentions a recent supply chain attack and wants to check their projects
• As a regular security check in development workflows
• When setting up CI/CD pipelines and wanting to harden them
• When a new supply chain attack is reported and the user wants to verify exposure

Instructions

Step 1: Understand the Project