Skill Trust Guard

Enforces skill-trust-scanner security checks before installing skills, blocking or alerting based on risk scores to reduce supply chain threats.

Npm Supply Chain Security

Help secure JavaScript projects by detecting malicious npm packages, enforcing trusted publishing, verifying releases, and auditing dependencies for threats.

in-toto

Go implementation of the in-toto (provides a framework to protect the integrity of the software supply chain) python reference implementation.

alon-github-security-audit

USE WHEN user wants to audit a GitHub repository or local directory for malicious code, backdoors, suspicious behavior, or supply-chain risk before trusting...

Notion Diary

Write diary entries or short 24-hour reports in Chinese or English, then sync them into Notion using a user-supplied NOTION_API_KEY and the bundled Python sc...

MCP Security Auditor Lite

Free version — scan your MCP configuration for the top 3 security risks. Tool description injection, permission sprawl, and supply chain trust.

ai-supply-chain-security

Cross-platform AI security scanner detecting hooks risks, MCP server attacks, prompt injection, supply chain threats in npm, PyPI, Rust, and GitHub Actions c...