Supply Chain Sentinel
This skill ensures the integrity of everything your software depends on.
Capabilities
- SBoM Generation
-
Generates a Software Bill of Materials (SBoM) in CycloneDX or SPDX formats.
-
Lists all direct and transitive dependencies with their hashes and origin.
- Provenance & Risk Audit
-
Analyzes dependency maintenance health (e.g., commit frequency, open issues).
-
Flags potential "typosquatting" or known malicious package patterns.
Usage
-
"Generate an SBoM for our production release."
-
"Audit our supply chain for packages with poor maintenance or suspicious origins."
Knowledge Protocol
- This skill adheres to the knowledge/orchestration/knowledge-protocol.md . It automatically integrates Public, Confidential (Company/Client), and Personal knowledge tiers, prioritizing the most specific secrets while ensuring no leaks to public outputs. \n## Governance Alignment\n\n- This skill aligns with IPA non-functional standards and FISC security guidelines to ensure enterprise-grade compliance.