skills/mukul975/anthropic-cybersecurity-skills/implementing-supply-chain-security-with-in-toto/Gen Agent Trust Hub
implementing-supply-chain-security-with-in-toto
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides utility scripts (
scripts/agent.pyandscripts/process.py) that utilize thesubprocessmodule to interface with thein-totoCLI toolset. These tools are used as intended for recording supply chain steps and verifying them against a layout policy. - [EXTERNAL_DOWNLOADS]: The documentation and scripts reference official software libraries (
in-toto,securesystemslib) and security tools (trivy,syft) that are standard in the container security and supply chain integrity ecosystem.
Audit Metadata