supply-chain-security
Installation
SKILL.md
Supply Chain Security
Use this skill when hardening the software supply chain against tampering, undisclosed vulnerabilities, and dependency risks. Applies to application builds, AI/ML pipeline artifacts, MCP server registries, and agent skill registries.
When to Use
- hardening CI/CD pipelines
- generating SBOMs (CycloneDX/SPDX)
- achieving SLSA Level 2/3 provenance
- auditing third-party deps including MCP registries