#supply-chain

Security scanner for Claude Code skills, plugins, and MCP servers. A verdict before you install.

Zero-execution preflight scanner for untrusted AI-agent and MCP artifacts

Static analysis for AI agents in GitHub Actions — finds where attacker-controlled text reaches an agent's prompt, and what that agent is allowed to do with it.

Multi-agent investment research agent powered by Chokepoint Theory (bottom-up supply-chain reverse engineering). Research only — not investment advice.

AI Audit State framework: analyzing capital, energy & labor constraints for systemic risk.

Read-only remote MCP server for wafergraph.com's semiconductor and AI supply-chain dataset (565 companies, supplier/customer graph, M&A deals). 9 tools, no auth, Cloudflare Workers.