Skip to content
Agentmart
Submit a tool

package-security-check

Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks…

Skill by instructa

IndexedLicense unknown★ 139
Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/instructa-package-security-check

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks, CI install checks, and optional incident IOC profiles.

Use cases: devops, security

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools
No tools found
Secrets
None asked for
Install scripts
None found
Runs as
Python package

Network hosts it talks to 1

  • codeload.github.com · found in install command

Files it touches

  • ~/.claude/skills/package-security-check

What's inside

Skill name
package-security-check
Description
Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks, CI install checks, and optional incident IOC profiles.
License
unknown
Instructions
169 lines in SKILL.md · view on GitHub

Before installing

  • Ships executable scripts

Files (4)

  • SKILL.md
  • openai.yaml · agents/
  • npm-supply-chain-2026-05.json · data/iocs/
  • check_js_supply_chain.py · scripts/

The license isn't open source, so the instructions aren't shown here. Read SKILL.md on GitHub

More from instructa/agent-skills

Compare and alternatives

    Featured in

    Signals

    Stars
    139
    Forks
    16
    Open issues
    0
    Last commit (this folder)
    Oct 15, 2026 (12 days ago)
    Last release
    Aug 13, 2026 (2 months ago)

    From GitHub (fetched Oct 24, 2026).

    Details

    License
    License unknown
    Repository
    github.com/instructa/agent-skills
    First seen
    Oct 24, 2026
    Last checked
    Oct 24, 2026
    Source
    GitHubgithub-graphql

    More from instructa

    Cite this page

    package-security-check skill. Agent Mart. https://agentmart.dev/skills/instructa-package-security-check (last updated 2026-10-24)