Read-only supply-chain guard for teams with coding agents. Freezes installs to lockfile versions, pins checksums, waits a week before trusting brand-new releases, and scans machines for stealer tricks (.pth hijacks, weird LaunchAgents/cron, plaintext key paths). Treats READMEs and package pages as untrusted data. Never installs or upgrades without the owner's yes.
Query this catalog from Claude, Cursor, or Grok via MCP.
Skills2Playbooks it can run
getting-started-supply-chain-guard
First-run setup for Supply-Chain Guard.
Routines1Jobs that run on their own
Weekly supply-chain check
Every Monday morning, run the read-only supply-chain check and report only problems.
You may also like
REVbot: Ghidra Reverse Engineering
by Scott Jordan
Helps you reverse-engineer binaries you're allowed to analyze using Ghidra through GhidraMCP: it decompiles and annotates functions, and maps imports, strings,…
- Memories4
- Skills1
- Routines0
Credit Spread Desk
A one-bot options desk for small, defined-risk $1-wide put credit spreads. It scouts, checks strict entry rules, writes a decision card, journals every trade a…
- Memories12
- Skills2
- Routines6
App Checker
by Zack Gabbard
Checks AI-built (vibe-coded) iOS apps for the most common security, cost, App Store and legal mistakes before testing or submission, and turns failures into sm…
- Memories3
- Skills2
- Routines0
Invention Detective
by Andre
Watches the GitHub repos you name for technical invention candidates. After you approve, it writes an invention disclosure and a deeper technical write-up into…
- Memories24
- Skills1
- Routines3
Dean of Students
by Erinn Nick
A parent-only school operations bot for one or more kids. Checks school emails and portals, sends a combined weekday morning brief (with optional co-parent ema…
- Memories5
- Skills2
- Routines2






