supply-chain-guard

Detect and remediate software supply chain attacks in npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines by scanning for known compromised packages, malicious versions, filesystem IOCs, C2 indicators, and CI/CD misconfigurations.

Skills
Security
33

What it does and how to use it

A skill that teaches Claude Code to do security tasks well. It is packaged knowledge the model uses whenever it is relevant.

Install the skill (command above).
In Claude Code, describe what you need - the skill turns on by itself when the context fits.
No commands to memorize: you talk in plain language and the skill does the rest.

Install (Claude Code)

mkdir -p .claude/skills/supply-chain-guard && curl -fsSL https://doutorai.pt/data/lib/skills__supply-chain-guard.md -o .claude/skills/supply-chain-guard/SKILL.md

Paste this command into the terminal, in your project folder, and the component installs automatically.

Content

---
name: supply-chain-guard
description: "Detect and remediate software supply chain attacks in npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines by scanning for known compromised packages, malicious versions, filesystem IOCs, C2 indicators, and CI/CD misconfigurations."
metadata:
  author: dan-avila
  version: '1.0'
  ioc-db-date: '2026-03-31'
---

# Supply Chain Guard

Automated detection and remediation of software supply chain attacks across npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines. Built from real-world attack intelligence gathered through March 31, 2026.

## Whe

- 🔒 Full content on the Pro plan (€7.99/month) -

Need help with Claude Code?

Ask Dr AI - it explains things simply.

Need a tailor-made solution?

Not sure where to start with AI in your business? Get a free assessment and a tailored plan - no commitment.

Save hours every week with AI, no hassle

Doutor AI gives you 1,859 ready-to-copy AI prompts, by industry and in plain English - plus a complete technical library for those who want to go further.

See plans