supply-chain-security Skill
Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies. Published by microsoft in hve-core.
Decision snapshot
Is this a fit?
Security review, Includes SKILL.md, Reusable instructions
Compatibility not yet detected.
Permission behavior not yet detected.
Copy skill directory
2 months ago · MIT license
No specific cautions were detected. Review the source and requested permissions before installing.
What is supply-chain-security Skill?
Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies. Published by microsoft in hve-core. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement. See how SkillIndex evaluates profiles.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Security review use cases
Declared skill metadata
- Declared license: MIT
- Source file: .github/skills/security/supply-chain-security/SKILL.md
These fields retain source and confidence evidence from the indexed SKILL.md.
Compatibility and setup
- Install or run with Copy skill directory
When to use supply-chain-security Skill
- Use it for security review.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/hve-core
- Skill file: .github/skills/security/supply-chain-security/SKILL.md
What it does
Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.
Skill instructions
Supply Chain Security This skill packages the durable software supply chain security (SSSC) reference material: open-standard catalogs, the combined capabilities inventory, and the classification taxonomies used to assess a repository's posture and turn gaps into prioritized work items. When to use Use this skill when you need to: Assess a repository against the 27 combined supply chain capabilities from hve-core and physical-ai-toolchain. Map posture against OpenSSF Scorecard, SLSA v1.0, OpenSSF Best Practices Badge, Sigstore (cosign), or NTIA SBOM minimum elements. Classify a gap by adoption category, effort size, or qualitative concern level. Derive work item priority and execution order from Scorecard risk levels. Skill layout Load the reference file for the topic you need. Each file holds the verbatim standard catalog or taxonomy. | Reference | Topic | |--------------------------------------------------------------------------------|------------------------------------------------
Verified compatibility and discovery
Frequently asked questions
What is supply-chain-security?
supply-chain-security is a open-source AI agent skill with Copy skill directory. Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.
Who is supply-chain-security best for?
supply-chain-security is best for reusing agent instructions, scripts, and references, security review workflows.
How do I install supply-chain-security?
Install or run supply-chain-security using Copy skill directory. Check supply-chain-security for the latest setup command.
Is supply-chain-security actively maintained?
supply-chain-security may need a closer maintenance check before production use.
Project health auto-fetched from the source repository.
Maintain this resource?
Review this source-backed profile, send a correction with evidence, or link to it from your documentation. Claims verify your relationship to the project; profile facts still require source evidence and editorial review.
