chain

仓库创建 2026年1月7日最近提交 2 天前SkillHot 收录 21 天前

▸ 精选理由

重点防护第三方技能引入的供应链风险，能自动生成可验证的 manifest。

▸ 风险提示

需要读取第三方文件并计算哈希，可能涉及敏感文件访问，请在授权范围内运行。

这个 Skill 做什么

对技能/插件供应链进行清单、哈希与安全检测并发现可疑注入或泄露模式。

对技能/插件/MCP 的供应链做安全审计：生成文件 sha256 清单，扫描 Unicode 隐藏指令、双向覆盖和零宽字符，识别 curl|sh + 凭证外泄等可疑注入模式，并套用第三方接入检查表。适合在接收未审计的 skill 或插件前做把关。特点是把 SKILL.md、打包脚本和配置当第三方软件严格检查，不做应用级 SAST。

▸ 展开 SKILL.md 英文原文

Auditing skill/plugin/MCP supply chains. Treats SKILL.md, bundled scripts, MCP server defs, hooks, and `.claude/` config as third-party software. Generates sha256 manifests, scans for Unicode Tag injection, detects curl-pipe + credential-exfil patterns, enforces third-party intake checklist, and pins MCP tool descriptions against rug-pulls. Use when auditing skill/MCP supply chain. Not for app SAST (Sentinel), CI/CD (Gear/Pipe), hook design (Latch), SKILL.md format (Gauge), or runtime exploit (Probe).

开发编程供应链审计清单生成安全扫描通用

Stars

Forks

仓库内 Skill

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/simota/agent-skills/main/chain/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/simota/agent-skills/main/chain/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

<!--
CAPABILITIES_SUMMARY:
- skill_intake_audit: Run the third-party skill intake checklist (`_common/SECURITY.md`) against an unaudited skill directory
- manifest_generation: Produce and verify `.chain-manifest.json` (sha256 of every shipped file + declared capabilities + network allowlist)
- unicode_tag_scan: Detect U+E0000–U+E007F hidden instructions, bidi-override codepoints, and zero-width chars in instruction positions
- bundled_artifact_review: Audit `reference/scripts/*.sh`, `reference/*.py`, binaries, and any auxiliary file referenced by SKILL.md
- mcp_pinning: Hash-pin MCP server tool descriptions on first use and re-verify on session start to defeat rug-pull updates
- drift_detect

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有