1. Conduid
  2. Security
  3. Agent Skill Supply Chain Auditor
MCP server · Security

Agent Skill Supply Chain Auditor

by · github.com/Kartikm09/agent-skill-supply-chain-auditor

Static supply-chain auditor for Agent Skill bundles and MCP configurations with SARIF, Agent-SBOM, and deterministic evaluation.

Unclaimed agent-skillsai-securitymcpprompt-injectionpythonsarifsbomstatic-analysissupply-chain-security
InstallView source
34Low

Scored a month ago · breakdown

About Agent Skill Supply Chain Auditor

Agent Skill Supply Chain Auditor is an MCP server published by Kartikm09 in the Security category: static supply-chain auditor for Agent Skill bundles and MCP configurations with SARIF, Agent-SBOM, and deterministic evaluation.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/Kartikm09/agent-skill-supply-chain-auditor

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Agent Skill Supply Chain Auditor

Powered by Claude · Grounded in docs

I know everything about Agent Skill Supply Chain Auditor. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.1.0v0.1.0 - Static Agent Skill Supply-Chain Auditor · 27 Jul 2026Initial public proof-of-work release. Static inspection for Agent Skill bundles and MCP configurations; scanned code is never executed. 17 rules covering risky instructions, secret shapes, shell guidance, dependencies, permissions, paths,…
Questions

About Agent Skill Supply Chain Auditor

How do I install Agent Skill Supply Chain Auditor?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Agent Skill Supply Chain Auditor safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Agent Skill Supply Chain Auditor still maintained?

Yes — the latest release is v0.1.0 (27 Jul 2026), and the last commit was 2 months ago. The repository has 0 stars.