/supply-chain-gate
Check any add-on before you let it onto your machine.
Buy this skill on its own
One skill, $5. The zip lands in your inbox straight after checkout. The whole Security Gates pack is $20, which works out cheaper per skill. See it below.
Get /supply-chain-gate for $5What it does
Treats installing someone else's code as a security event. Before it lands, this checks the package against known attacks, reads any setup script that runs automatically, and watches for behavior that looks wrong. Brand new malicious packages get caught this way, because nobody has reported them yet.
When to reach for it
- Before you install anything you did not write
- A tutorial tells you to install a package you have never heard of
- You are choosing between two add-ons and want the safe one
03
Part of the Security Gates pack
- /vibeaudit-workflow
- /clone-and-run-gate
- /stripe-webhook-hardening
- /secret-leak-triage
- /drizzle-rls-supabase