Skip to main content

/

/

Stats

Actions

Tags

Stats

Actions

Tags

ClaudePluginHub

Community directory for discovering and installing Claude Code plugins.

Find plugins for your project

AI-powered recommendations based on your stack.

Product

Browse Plugins
Marketplaces
Pricing
About
Contact

Resources

Learning Center
Blog
Weekly Digest
Claude Code Docs
Plugin Guide
Plugin Reference
Plugin Marketplaces

Community

Browse on GitHub
Get Support

Legal

Terms of Service
Privacy Policy

Browse · Plugins · Top Plugins · Marketplaces · Components · Technologies · Skills · Agents · Commands · Hooks · MCP Servers · LSP Servers · Output Styles · Themes · Monitors

Categories · Productivity · Development · Testing · Deployment · Security · Documentation · Data · Utilities

© 2025 ClaudePluginHub

Community Maintained · Not affiliated with Anthropic

ClaudePluginHub

ClaudePluginHub

Tools Learn Pricing

Search everything...

review-supply-chain | archrip

Home
Skills
archrip
review-supply-chain

Skill

review-supply-chain

Review supply-chain and code-execution risks

Popularity

Stars

1

Invocation

How this skill is triggered — by the user, by Claude, or both

Slash command

/archrip:review-supply-chain [scope: git diff | path | notes]

User invocable

Model invocable

Inline context

Default effort

Argument hint[scope: git diff | path | notes]

Context Preview

The summary Claude sees in its skill listing — used to decide when to auto-load this skill

Review the codebase for supply-chain risk and untrusted-code execution paths.

SKILL.md

26 lines · ~225 tokens

Stats

LanguageTypeScript

Stars1

MaintenanceExcellent

Last CommitJun 16, 2026

Actions

View Source View Plugin View on GitHub View README

Stats

LanguageTypeScript

Stars1

MaintenanceExcellent

Last CommitJun 16, 2026

Actions

View Source View Plugin View on GitHub View README

Supply-chain / execution safety review

Review the codebase for supply-chain risk and untrusted-code execution paths.

Focus areas

Where the tool executes external commands (npm, npx, git, shell)
Where it downloads/installs dependencies at runtime
Template copying / vendored code: how integrity/origin is verified
Lockfiles and reproducibility (npm ci vs npm install)
Symlink/path traversal risks when executing within project directories

Output format

Attack surface inventory (commands + cwd + trust boundary)
High-risk findings (with file paths)
Minimal mitigations (ordered)
- pin versions/lockfile, avoid npx, run npm run, symlink rejection, integrity checks

$ARGUMENTS

$

npx claudepluginhub yida29/archrip --plugin archrip

Similar Skills

skill-creator

150.3k

Creates, edits, and optimizes skills for Claude Code, including drafting, evaluating with test prompts, iterating on performance, and improving skill descriptions for better triggering accuracy.

17 files

document-skills

View skill-creator