Trending repositories: supply-chain-security

3 of 3 repositories

• NVIDIA/SkillSpector

  Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

  AI summary: A security scanner that detects vulnerabilities and malicious patterns in AI agent skills before execution.

  14,305securityPythonApache-2.0agent-securityagent-skillsagentic-aiai-security

• perplexityai/bumblebee

  Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

  AI summary: A read-only scanner for checking developer endpoints against known supply-chain compromises.

  4,884securityGoApache-2.0golangpackage-inventorysupply-chain-securitysupply-chain

• sheeki03/tirith

  Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

  AI summary: A modern, extensible policy engine for evaluating infrastructure as code (IaC) against security and compliance rules.

  2,641infrastructureRustAGPL-3.0clidevtoolshomograph-attackrust