llm-supply-chain
Detects compromised or backdoored models loaded from unverified sources, floating tags, or unreviewed registries. Use when writing code that downloads pre-trained models, loads models from registries or file paths, integrates third-party LLM providers, or manages model version selection. Also invoke when setting up automated model updates.
Install
With your agent
Install OMGSkills skill "thejefflarson/soundcheck:.claude/skills/llm-supply-chain" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/thejefflarson/soundcheck /tmp/soundcheck && ln -s /tmp/soundcheck/.claude/skills/llm-supply-chain ~/.claude/skills/llm-supply-chainFrom README
LLM Supply Chain Security Check (OWASP LLM05:2025) What this checks Protects against compromised or backdoored models introduced through unverified downloads, floating version tags, or unreviewed third-party providers. A tampered model weight file or a silently swapped latest tag can introduce persistent backdoors that survive retraining. Vulnerable patterns Model artifact downloaded from an arbitrary host or URL with no checksum or signature verification Model identifier that uses a floating tag (latest, main, a mutable branch) instead of an exact pinned revision Third-party model integrated with no review of model card, license, or provenance Automated model-update job in CI that bumps revisions without a human approval gate Fix immediately Flag the vulnerable code and explain the risk. Then suggest a fix that establishes these properties: Model revisions are pinned to an exact commit SHA or content digest, never a mutable name like main or latest.
More from this repo
authentication-failures
Detects weak password storage, flawed JWT validation, sessions surviving logout, and missing MFA in authentication code.
broken-access-control
Detects missing ownership checks, broken role enforcement, and IDOR vulnerabilities that let users access other users'...
concurrency-correctness
Detects multi-threaded code where a lock is held across a blocking operation, lock acquisition order risks deadlock,...