🎯

agent-supply-chain

🎯Skill

from github/awesome-copilot

What it does

Generate and verify SHA-256 `INTEGRITY.json` manifests for AI agent plugins and tools so tampering, missing files, and untracked additions are detected before promotion. Produces deterministic per-file hashes plus a chain-hash `manifest_hash`, verifies an installed plugin against a prior manifest, audits dependency pinning in `package.json` / `requirements.txt` / `pyproject.toml` (flagging `^`/`~`/`*`/`latest`), and runs a dev → staging → production promotion gate that also checks for required files and pinned MCP servers.

📦

Same repository

github/awesome-copilot(378 items)

agent-supply-chain

Installation

Vibe Index InstallInstalls to .claude/skills/

npx vibeindex add github/awesome-copilot --skill agent-supply-chain

skills.sh Install⚠ Installs to .agents/skills/

npx skills add github/awesome-copilot --skill agent-supply-chain

Manual InstallCopy SKILL.md content and save to the path below

~/.claude/skills/agent-supply-chain/SKILL.md

SKILL.md

923Installs

AddedApr 13, 2026

View on GitHub Back to Skills

More from this repository10

🎯

git-commit🎯Skill

A community-curated collection of custom agents, prompts, instructions, and skills to enhance GitHub Copilot across different domains, languages, and use cases.

🎯

excalidraw-diagram-generator🎯Skill

Generates Excalidraw diagrams from natural language descriptions, creating visual representations of processes, systems, relationships, and ideas.

🎯

documentation-writer🎯Skill

Expert technical writer guided by the Diataxis framework, creating tutorials, how-to guides, reference docs, and explanation pages for software documentation.

🎯

gh-cli🎯Skill

A community-curated collection of custom agents, prompts, instructions, and skills to enhance GitHub Copilot across different domains, languages, and use cases.

🎯

prd🎯Skill

Generates comprehensive Product Requirements Documents (PRDs) by systematically analyzing requirements and crafting detailed technical specifications

🎯

refactor🎯Skill

A community-curated collection of custom agents, prompts, instructions, and skills to enhance GitHub Copilot across different domains, languages, and use cases.

🎯

multi-stage-dockerfile🎯Skill

Creates optimized multi-stage Dockerfiles for any language or framework, separating builder and runtime stages to produce smaller, more secure container images.

🎯

java-springboot🎯Skill

Provides Spring Boot best practices covering project setup, dependency injection, REST API design, data access with JPA, security configuration, and testing strategies.

🎯

playwright-generate-test🎯Skill

Generates Playwright end-to-end tests from user-described scenarios using Playwright MCP for browser automation.

🎯

create-readme🎯Skill

Creates README.md files for projects.