Updated 1mo ago
by latiotech
secure-supply-chain-skills
A set of tools for claude code to fix insecure software supply chain configurations
29 GitHub stars (29)
Steady at 29 stars — no new stars in the 16 days since Sep 30.
- 1 skill (1 skills found in its SKILL.md files)
- 4 forks (4 forks)
- 1mo ago last update (Last updated 1mo ago)
Install
Skills CLI
npx skills add latiotech/secure-supply-chain-skills
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/latiotech/secure-supply-chain-skillscp -r "secure-supply-chain-skills/skills/supply-chain-hardening" ~/.claude/skills/
Copies the supply-chain-hardening skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add latiotech/secure-supply-chain-skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
supply-chain-hardening
Use this skill when the user asks to "harden supply chain", "secure dependencies", "pin versions", "audit packages", "secure GitHub Actions", "harden containers", "secure IaC", "audit extensions", "secure AI models", "audit pickle files", "scan for secrets", "harden credentials", "rotate tokens", "audit credentials", "sign commits", "commit signing", "signed commits", "gitsign", or needs guidance…
skills/supply-chain-hardening/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.