Skill Supply Chain Audit

Skill Supply Chain Audit is a Quality skill for Claude Code, published by seb1n in awesome-ai-agent-skills.

174 stars32 forkson seb1n/awesome-ai-agent-skillsAdded 2026/09/07+2% in starsRepository updated 2026/08/09

agent-skillsai-agent-skillsai-agentsawesome-listclaude-codeclaude-code-skillsclaude-skillscodexcodex-skillscontext-engineeringcursorcursor-skillsgemini-cligemini-skillsgithub-copilotmcpopenai-codexskill-mdskillswindsurf

Install in seconds

Install Skill Supply Chain Audit

Copy Skill Supply Chain Audit into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/seb1n/awesome-ai-agent-skills/tree/main/agent-security/skill-supply-chain-audit ~/.claude/skills/skill-supply-chain-audit

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/seb1n/awesome-ai-agent-skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: agent-security/skill-supply-chain-audit/SKILL.md in seb1n/awesome-ai-agent-skills
Installs to: ~/.claude/skills/skill-supply-chain-audit
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1817 skills

What Skill Supply Chain Audit does

Skill Supply Chain Audit reviews third-party skills, prompts, manifests, scripts, dependencies, and bundled assets for provenance, injection risk, permissions, execution, exfiltration, persistence, and update risk. Use it before installing or updating an untrusted skill or repository.

Skill Supply Chain Audit is cataloged under Quality on DirSkills. Skill Supply Chain Audit comes from a repository tagged agent-skills, ai-agent-skills, ai-agents, awesome-list and claude-code.

Documentation

README

Excerpt

Skill Supply Chain Audit

Treat the target as untrusted. Produce an evidence-backed disposition without executing package code by default.

Inputs

Collect or state:

Target path, archive, repository snapshot, or exact version/commit.
Claimed purpose, publisher, source URL, license, and expected capabilities.
Intended runtime, available tools, requested permissions, and data sensitivity.
Known-good baseline or prior version when this is an update.
User constraints for network access, sandboxing, and dynamic testing.

If provenance or version is unknown, record it as unknown; do not infer trust from popularity.

Output contract

Return:

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Skill Supply Chain Audit

What else does seb1n publish alongside Skill Supply Chain Audit?
Skill Supply Chain Audit is one of 25 skills that DirSkills catalogs from seb1n/awesome-ai-agent-skills, the repository it ships in. Its siblings there include API Design, API Integration and Agent Evaluation. Each one is a separate skill with its own page in this directory, installs the same way Skill Supply Chain Audit does, and is maintained by seb1n in that same repository. The rest of the collection is listed on the seb1n/awesome-ai-agent-skills page.
How does Skill Supply Chain Audit compare to other Quality skills?
Skill Supply Chain Audit ranks #1724 by stars among the 1817 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Skill Supply Chain Audit against them. Open each page to compare what they document and how they install.