{"slug":"escoffier-labs-supply-chain-harden","source_name":"escoffier-labs/supply-chain-harden","name":"Escoffier Labs/Supply Chain Harden","description":"Use when asked to harden a repository's software supply chain, pin GitHub Actions to commit SHAs, lock down workflow permissions, add Dependabot or secret scanning to CI, move npm publishing to trusted publishing with provenance, or pin Docker base images. Applies the changes as one reviewable branch per repo. Read-only audits belong to security-sweep.","version":2,"lift":{"pass_rate_delta_pts":36.36,"pass_rate_pct":77.3,"total_cases":22,"passed_cases":17,"tokens_delta_pct":267.3,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.8-flash","grading_method":"judged","completed_at":"2026-11-06T03:27:00.924897+00:00"},"skill_score":0.7727,"benchmark_models":[{"model":"gemini-3.8-flash","headline":true,"delta_pts":36.36,"with_pass_pct":77.3,"without_pass_pct":40.9,"tokens_delta_pct":267.3,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-11-06T03:27:00.924897+00:00","run_id":"aada1df6-d073-4170-97a0-ff978b944175","latest_attempt":{"id":"aada1df6-d073-4170-97a0-ff978b944175","runner_model":"gemini-3.8-flash","overall_verdict":"mixed","completed_at":"2026-11-06T03:27:00.924897+00:00","gate":null},"version_number":2,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":null,"content_status":"clean","indexable":true},"license":"MIT","install_count":0,"total_uses":0,"total_users":0,"manifest_hash":"8ded3798e47f19920d34823f831f09f00e043990f54fe3fabaec2a8c7a9c4dad","install_name":"escoffier-labs-supply-chain-harden","version_id":"343d807b-853d-4ebf-9446-5ad34c2506e9","body_sha256":"8ded3798e47f19920d34823f831f09f00e043990f54fe3fabaec2a8c7a9c4dad","render_hash":"32fc4bb4bbfe4a8de4e2d36b4dc7ef958d9d4371521f91b1f5b4f11c763c213a","raw_url":"https://app.decimal.ai/s/escoffier-labs-supply-chain-harden/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/escoffier-labs-supply-chain-harden"}