agent-supply-chain
Verify supply chain integrity for AI agent plugins, tools, and dependencies. Use this skill when: - Generating SHA-256 integrity manifests for agent plugins or tool packages - Verifying that installed plugins match their published manifests - Detecting tampered, modified, or untracked files in agent tool directories - Auditing dependency pinning and version policies for agent components - Building provenance chains for agent plugin promotion (dev → staging → production) - Any request like "verify plugin integrity", "generate manifest", "check supply chain", or "sign this plugin"
Install
Install this Claude and Codex skill with the command below. The command stays visible even when copy support is unavailable.
git clone https://github.com/github/awesome-copilot /tmp/awesome-copilot && ln -s /tmp/awesome-copilot/skills/agent-supply-chain ~/.claude/skills/agent-supply-chain
More from this repo
agent-governance
Patterns and techniques for adding governance, safety, and trust controls to AI agent systems.
acquire-codebase-knowledge
Used when the user explicitly asks to map, document, or onboard into an existing codebase.
acreadiness-assess
Used to run the AgentRC readiness assessment on the current repository and produce a static HTML dashboard at...