Download

Skill UI

Browse and discover 15801+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Supply Chain Security , found 38 results

Default Newest Most Downloaded

Dependency Audit and Security Analysis

codebase-cleanup-deps-audit

sickn33/antigravity-awesome-skills

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

Dependency Vulnerability and Security Audit

dependency-management-deps-audit

sickn33/antigravity-awesome-skills

This skill functions as a specialized dependency security expert. It analyzes project dependencies to identify critical security vulnerabilities, licensing compliance issues, and outdated packages. It provides comprehensive, actionable remediation strategies to strengthen supply chain security.

Dependency Vulnerability Scanning and Analysis

security-scanning-security-dependencies

sickn33/antigravity-awesome-skills

This skill acts as a specialized security expert for analyzing project dependencies. It scans dependencies across multiple ecosystems (e.g., npm, pip, Maven) to identify known vulnerabilities, assess associated risks, and generate Software Bill of Materials (SBOMs). It provides comprehensive insights into supply chain security and offers automated strategies for remediation, ensuring compliance and stability during development.

Vulnerability Defense Framework

vulnerability-scanner

sickn33/antigravity-awesome-skills

Provides an OWASP 2025-aligned vulnerability scanning mindset, supply chain defenses, attack surface mapping, and risk prioritization guidance with runtime scripts for automated validation of modern application security.

Supply Chain Risk Auditor

supply-chain-risk-auditor

trailofbits/skills

Systematically examines project dependencies, using GitHub data to highlight single-maintainer, unmaintained, unpopular, or otherwise risky packages before audits so teams can focus security efforts and propose better-maintained alternatives.

AI Agent Skill Security Auditor

skill-security-auditor

alirezarezvani/claude-skills

A comprehensive security scanner designed to audit AI agent skills before deployment. It analyzes source code (Python, Bash, JS), detects critical vulnerabilities like command injection, network exfiltration, and unsafe deserialization. Furthermore, it scans markdown files for prompt injection attacks, and assesses dependency supply chain risks, providing a clear PASS/WARN/FAIL verdict and remediation guidance.

Agent Skill Security Auditor

sickn33/antigravity-awesome-skills

A comprehensive, multi-phase security audit tool designed to evaluate AI agent skills before deployment. It detects critical vulnerabilities, including prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks, ensuring the integrity and safety of your agent environment.

Supply Chain Dependency Risk Auditor

supply-chain-risk-auditor

sickn33/antigravity-awesome-skills

This tool systematically audits a project's dependencies to identify potential supply chain security risks. It evaluates critical factors such as maintenance status, contributor count, popularity, and the presence of high-risk features. It is ideal for pre-security audits, assessing the overall attack surface, and mitigating risks before deployment.

Analyzing Supply Chain Malware Artifacts

analyzing-supply-chain-malware-artifacts

mukul975/Anthropic-Cybersecurity-Skills

This skill provides a structured methodology and tools for investigating sophisticated supply chain attacks. It focuses on detecting trojanized software updates, compromised build pipelines, and hidden dependencies by performing deep binary comparison, code signing verification, and anomaly detection. Use it during incident response to map out intrusion vectors and assess the full scope of a security breach.

Detect Supply Chain Attacks in CI/CD

detecting-supply-chain-attacks-in-ci-cd

mukul975/Anthropic-Cybersecurity-Skills

A robust security auditing tool designed to scan CI/CD pipeline configurations, such as GitHub Actions YAML, for critical supply chain vulnerabilities. It automatically detects issues like unpinned dependencies, script injection risks, secrets exposure, and dependency confusion, helping teams harden their build systems and maintain secure software development lifecycles.

Exploiting Broken Link Hijacking Vulnerabilities

exploiting-broken-link-hijacking

mukul975/Anthropic-Cybersecurity-Skills

This skill provides a comprehensive methodology for discovering and exploiting broken link hijacking vulnerabilities. By spidering a target site and extracting all external scripts, domains, and references, the skill checks the DNS and domain registration status. It is crucial for conducting subdomain takeover testing, supply-chain security reviews of third-party resources, and advanced bug bounty hunting.

Container Security Scanning with Trivy

implementing-aqua-security-for-container-scanning

mukul975/Anthropic-Cybersecurity-Skills

Learn how to implement robust container security by integrating the open-source Trivy scanner (from Aqua Security) into your CI/CD pipelines. This guide covers scanning container images, Kubernetes manifests, IaC files, and code repositories to detect critical vulnerabilities, misconfigurations, secrets, and generating Software Bill of Materials (SBOM) for comprehensive supply chain security.

Language