FreeSkills
Commits, branches and sync with the but CLI
- 361361 downloads
- 198198 likes
- 103103 saves
Works with
- Claude Code
- Codex
- Cursor
- and 3 more
Security audit of skills, plugins and MCP servers v1.0.0
Use this resource to audit the security of a third-party skill, plugin or MCP server
New
- 353 downloads
- 107 likes
- 165 saves
Free
Install with the CLI
In a terminal, from the folder you want:
npx --yes palatekit@latest install skill-supply-chain-security-auditWith no option, the skill goes to ~/.agents/skills/; add --agent claude-code (or codex, cursor…) to target an agent.
First time: connect the CLI with
npx --yes palatekit@latest loginThe agent runs a skill folder through an intake checklist, scans for hidden Unicode and bundled scripts, then generates a hash manifest. You get an accept or reject verdict and, if compromised, an eradication procedure.
Mostly picked by
Updated November 2, 2026
Previews
Details
- Install guides
- Generates with
- Your agent's model
- Licence
- MIT
Similar resources
View all- Free
FreeSkills
Sentry CLI guide
- 525525 downloads
- 117117 likes
- 128128 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Drizzle ORM best practices with PostgreSQL
- 407407 downloads
- 194194 likes
- 151151 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
SLO design wizard
- 537537 downloads
- 105105 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
User stories and sprint fit
- 451451 downloads
- 150150 likes
- 132132 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Capacity-based sprint plan
- 423423 downloads
- 192192 likes
- 102102 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Startup CTO advisor
- 580580 downloads
- 201201 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Creating GitHub pull requests with quality checks
- 427427 downloads
- 230230 likes
- 196196 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
What you get
- reference/: audit decision matrix, intake checklist and bundled artifact review
- reference/: hidden Unicode scan, compromise indicators and eradication procedures
Good fit for
- You want to install a skill found online
- A package in your project may have been compromised
Not for
Tags
- security
- skills
- mcp
- supply chain
- audit
About
You say
“Audit this downloaded skill before I add it to my project.”
Skill published by simota under the MIT license, delivered in its original version.
Show moreShow less
How to use it
- Install the skill in your agent's skills folder
- Ask your agent to audit the security of a third-party skill, plugin or MCP server
- Review and adjust the result
Content preview
Files
- LICENSE1 KB
- NOTICE-PALATEKIT.md0.4 KB
- reference/audit-decision-matrix.md1.9 KB
- reference/autorun-schema.md1.8 KB
- reference/bundled-artifact-review.md8.6 KB
- reference/intake-checklist.md12.3 KB
- reference/recipes-index.md2.2 KB
- reference/reference-index.md1.9 KB
- reference/supply-chain-malware-eradication.md14.5 KB
- reference/supply-chain-malware-handoffs.md6.1 KB
- reference/supply-chain-malware-ioc-database.md15.2 KB
- reference/supply-chain-malware-scan-procedures.md12.8 KB
- reference/unicode-tag-scan.md7 KB
- SKILL.md23.8 KB
Origin and licence
Listed unmodified
- Author
- simota
- Source
- github.com/simota/agent-skills/tree/2e02cc9efb3852a45334495df3784d59b87b0e18/chain
- Licence
- MIT
Notice
« chain » (simota, MIT) livré dans sa version d'origine : fiche en français et en anglais par PalateKit.
User reviews
–
No ratings yet
Loading reviews…