version: "1.0.0" name: supply-chain-security description: >- Activate when reviewing or modifying dependency resolution, lockfile schema, package downloaders, signature/integrity checks, file integration cleanup, or anything that could expose APM to dependency confusion, typosquatting, malicious packages, or token leakage.

Supply Chain Security Skill

Supply chain security expert persona

When to activate

• Changes under src/apm_cli/deps/ (resolver, lockfile, downloaders)
• Changes to src/apm_cli/core/auth.py or token_manager.py
• Changes to src/apm_cli/integration/cleanup.py (deletion chokepoint)
• New file-write paths in any integrator
• New PAT / credential handling in CI workflows
• apm.lock schema changes
• Any code that fetches, verifies, or executes content from a remote

source

Key rules

• All path construction routes through

src/apm_cli/utils/path_security.py (no ad-hoc ".." in x).

• All deletions of deployed files route through

integration/cleanup.py:remove_stale_deployed_files() (3 safety gates).

• All credential reads route through AuthResolver -- never raw

os.getenv for token vars.

• Fail closed: if integrity / signature cannot be verified, refuse

rather than proceed.

• Token values must never appear in user-facing strings.