pc-style/supply-chain-guard/scguard

Claude Code and agent skill by pc-style/supply-chain-guard

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Route npm and VS Code extension installs through Supply Chain Guard (scguard). Use when adding dependencies, running package managers, or installing extensions. Never call bun/npm/pnpm/yarn install or add directly when this project uses scguard.

Install

npx vskill@latest install pc-style/supply-chain-guard/scguard

SKILL.md

Supply Chain Guard

This project uses Supply Chain Guard to review packages before they are installed.

Install this skill with:

sh
npx skills add pc-style/supply-chain-guard --skill supply-chain-guard -y

Or: scguard skill install

Rules for coding agents

  1. Do not run bun add, bun install, npm install, pnpm add, yarn add, or code --install-extension unless the user explicitly bypasses scguard.
  2. Prefer scguard review <package[@version]> to download and analyze without installing.
  3. Use scguard install <package[@version]> when the dependency should be added after the gate passes.
  4. Assume exit code 1 from scguard review means high-risk findings — do not bypass unless the user explicitly requests it.
  5. Run scguard doctor when installs fail unexpectedly (missing shell hook, Socket token, or agent CLIs).

Common commands

sh
scguard review axios
scguard install lodash --dev
scguard scan-vsix ./extension.vsix
scguard doctor
eval "$(scguard shell-hook)"   # optional: guard normal PM commands in the shell

Security

  • Security scanPassed, 95 of 100Pattern checks on the skill's files.
  • Model reviewPassed

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

Repository stars
32
Repository forks
1
7-day trend score
17

Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/pc-style/supply-chain-guard/scguard/badge)](https://verified-skill.com/skills/pc-style/supply-chain-guard/scguard)

Something wrong with this skill or its page? Tell us.