Browse The Skill Store

Automated open-source license audit and risk assessment based on your project's specific distribution model.

🛡️ GitHub Actions Permission Hardener

by JustHandled Labs

$19

or 95 cr

Audit and harden GitHub Actions workflows against overbroad permissions, secrets exposure, and supply-chain risks.

📦 Package Supply Chain Sentinel

by JustHandled Labs

$19

or 95 cr

Vet dependency changes for supply-chain risk before you install, commit, or release. Scans package and lockfile diffs for install-time lifecycle scripts, non-registry sources, suspicious download commands, typosquatting, and floating versions, across npm, pnpm, yarn, pip, uv, and poetry. Flags what to review with evidence. No install required.

Dependency & Supply Chain Risk Gate — Catch Vulnerable, Outdated & Typosquatted Packages Before They Ship

by PubsProToolkit

$12

or 60 cr

Audit your project's dependencies for supply-chain risk before they ship. Detects the ecosystem, runs the right vulnerability scanners against live advisory data, and adds the checks tooling misses — outdated or abandoned packages, typosquatted or suspicious names, risky install scripts, and license conflicts — then returns a prioritized fix list and a PASS / REVIEW / BLOCK verdict. It's npm audit with triage and judgment on top.

Evaluate third-party agent skills for command injection, prompt injection, and data exfiltration before installation.

Structured security auditing for AI agent skills to detect prompt injection, data exfiltration, and malicious commands.

Serenity Style Bottleneck Alpha Research Pro

by Nicholas Chung

$9.99

or 50 cr

Map supply chains, identify overlooked upstream chokepoints, score candidate quality, audit evidence, and generate research reports.