sk Skill · 0xDarkMatter
supply-chain-defense
Behavioural-first defense against poisoned npm/PyPI packages in the publish-to-advisory window CVE tools miss. Use before every install or version bump: 7-day cooldown gate, Socket.dev behavioural score, stale-OIDC audit, publish-token rotation, and a worm-persistence self-scan.
Open on skills.sh ↗read 2026-09-15
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 1
powershelljsonbashShell
- Host repository
- 0xDarkMatter/claude-mods
- Allowed tools
- Read Edit Write Bash Glob Grep Agent WebFetch
- Licence
- MIT
- Host stars
- 37
- Host language
- Shell