Detect and remediate software supply chain attacks in npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines by scanning for known compromised packages, malicious versions, filesystem IOCs, C2 indicators, and CI/CD misconfigurations.
安装
npx skills add davila7/claude-code-templates --skill supply-chain-guardnpx skills add davila7/claude-code-templates --skill supply-chain-guard -a claude-code -gnpx skills add davila7/claude-code-templates --skill supply-chain-guard -a codex -ggemini skills install https://github.com/davila7/claude-code-templates.git --path cli-tool/components/skills/security/supply-chain-guardgh skill install davila7/claude-code-templates supply-chain-guardgit clone --depth 1 https://github.com/davila7/claude-code-templates /tmp/davila7__claude-code-templates
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/davila7__claude-code-templates/cli-tool/components/skills/security/supply-chain-guard ~/.claude/skills/supply-chain-guard # Claude Code
cp -R /tmp/davila7__claude-code-templates/cli-tool/components/skills/security/supply-chain-guard ~/.agents/skills/supply-chain-guard # Codex, Cursor, Gemini CLI, Copilot, OpenCode