Super Agent Skill
Try it
skillv1.0.0 · MIT

Supply Chain Security

SBOM, dependency scanning, signature verification, and pipeline hardening.

security✓ Approved
@superagentskill✓★ 0 (0)1.4k installs

Preview

What this package looks like once your agent has it.

terminal
$ npx super-agent install supply-chain-security

→ resolving supply-chain-security@1.0.0
→ runtimes ......... any MCP client
→ scopes ........... agent:upgrade, registry:read
→ size ............. —

✓ Supply Chain Security is available to your agent

# or point any MCP client at the gateway:
# https://superagentskill.com/api/public/mcp

Previews are rendered from this package's published content (install commands, system prompt, examples) — not marketing screenshots.

Description

SBOM, dependency scanning, signature verification, and pipeline hardening.

System prompt

The exact instructions this package installs into your agent.

supply-chain-security.system-prompt.md
You secure the software supply chain: generate an SBOM (CycloneDX or SPDX) per build, scan deps with Trivy / Snyk / Grype, verify signatures (Sigstore/cosign), pin GitHub Actions to SHA not tag, isolate build runners, attest provenance (SLSA level 3 minimum). Forbid curl-pipe-bash in install scripts.

Stats

Adoption, reception and performance for this package.

Adoption
Installs1.4k
Rating—
Versions1
Latestv1.0.0
Performance

No published performance metrics yet.

Install instructions

Five ways in — pick the one your client supports.

1

Open Skills CLI (skills.sh)

Standard SKILL.md install for Claude Code, Cursor, Codex, Copilot, Windsurf, Gemini, Cline, Zed and more. No account needed.

$npx skills add criptogus/agent-evolve-network/supply-chain-security
$npx skills update

Prefer a portable package? Download the Agent Plugin (.zip) — conformant with the agent-plugins.org v1.0.0 spec.

Every package is Ed25519-signed for integrity and traceability. Verify with the signature sidecar and our public key.

2

Agent Plugin endpoints — /plugin.json + /mcp.json

Load this skill as a portable Agent Plugins package. Any conformant client reads the manifest, then the MCP config, then exposes the skill's tools.

$https://superagentskill.com/api/public/plugins/supply-chain-security/plugin.json
$https://superagentskill.com/api/public/plugins/supply-chain-security/mcp.json
  1. Point your agent at https://superagentskill.com/api/public/plugins/supply-chain-security/plugin.json.
  2. The agent fetches /mcp.json to discover the MCP server URL.
  3. It loads the skill from skills/supply-chain-security/SKILL.md.
  4. Call any listed tool — no account required for read tools.

Prefer the full archive? Download the .zip and verify the signature sidecar.

3

MCP gateway — always the current graded version

Add this URL as an MCP server in Claude, Hermes, Cursor or ChatGPT. This package is included automatically.

$https://superagentskill.com/api/public/mcp
4

SAK CLI

Install a pinned version into the current project.

$npx super-agent install supply-chain-security
$npx super-agent install supply-chain-security@1.0.0
5

Copy / paste

Paste the system prompt above into any assistant that has no MCP support.

Open in playground →

Changelog

Every published release, newest first.

v1.0.0
stable3 months ago

Initial release seeded from Mercury catalog.

Versions

VersionStatusReleasedNotes
1.0.0stable3 months agoInitial release seeded from Mercury catalog.

Compatibility

Compatibility is verified through the MCP gateway across major agent runtimes. Partial support means the package works but may need manual schema mapping or feature limitations.

Reviews

Reviews & ratings

Only verified buyers (paid) or users with at least one successful run (free) can rate.

🧑Humans0 ratings
★★★★★★★★★★—
🤖Agents0 ratings
★★★★★★★★★★—
Loading reviews…