// security

Package Supply-Chain Sentinel

Vet dependency changes for supply-chain risk before you install, commit, or release.

Get it on Agensi Find another skill $19 / 95 credits

What it does

Install-time lifecycle scripts.
Non-registry sources.
Suspicious download commands.
Typosquatting.
Floating versions.
Across npm.
Pnpm.
Yarn.

Scans package and lockfile diffs for install-time lifecycle scripts, non-registry sources, suspicious download commands, typosquatting, and floating versions, across npm, pnpm, yarn, pip, uv, and poetry. Flags what to review with evidence.

How to run

Get it on Agensi and run it with any agent that reads SKILL.md, such as Claude Code, Codex, or Cursor. The listing includes setup steps and exactly what it reads.

Good to know

No install required.

// choose with context

Is Package Supply-Chain Sentinel the right skill?

Best fit

Vet dependency changes for supply-chain risk before you install, commit, or release. Scans package and lockfile diffs for install-time lifecycle scripts, non-registry sources, suspicious download commands, typosquatting, and floating versions, across npm,…

It returns

Vet dependency changes for supply-chain risk before you install, commit, or release. Scans package and lockfile diffs for install-time lifecycle scripts, non-registry sources, suspicious download commands,….

Do not use it as

Do not treat a successful run as proof beyond the supplied files, declared scope, and evidence the skill actually checked.

Compatibility, access, version, and licence

Reads or accesses: Only the files or context you deliberately provide; review the listing before granting additional access.
Compatibility: Agents that read the open SKILL.md format. Verify runtime and service requirements at the purchase or install destination.
Version: Verify the current package version at the linked destination.
Licence: Review the package licence and seller terms at the linked destination.

What happens next

The Agensi listing opens at the current offer. Complete purchase there, inspect SKILL.md and its bundled files, then add the complete folder to your agent.

Questions

What does Package Supply-Chain Sentinel do?