Defensive agent supply-chain security for repositories that AI agents and automations touch. Use before making a repo public or pushing to one, when reviewing a cloned starter template or third-party skill/package, or when an agent has GitHub credentials that can delete/rename/transfer/archive repos.
Install
The individual skill folder is not confirmed. This command opens the repository’s skill selector; follow the upstream instructions.
skills CLI
npx skills add 0xNyk/agent-security