supply-chain-risk

Use this skill whenever you want to assess the agent supply chain as an attack surface: the trust, provenance, and integrity of the MCP servers, tools, connectors, third-party packages, and model endpoints your agents depend on. Trigger on requests like "is this MCP server safe to trust", "assess our agent supply chain risk", "where did this tool come from and who controls it", "check these connectors for tampering or over-broad scopes", "which third-party components could compromise our agents", or anything touching malicious or compromised MCP servers, dependency risk, tool poisoning, or untrusted integrations. Also use this when vetting a new integration before you approve it or reviewing which platforms you trust. This skill is about the trustworthiness of the components agents rely on, so use it whenever the question is whether something in the chain can be trusted.