{"slug":"jamditis-supply-chain-hardening","source_name":"jamditis/supply-chain-hardening","name":"Jamditis/Supply Chain Hardening","description":"Configure install-time cooldowns for npm/bun (minimum release age) and run a sandboxed pre-install scan when the cooldown has to be bypassed. Use when the user asks about supply-chain attacks, npm/bun security, \"minimum release age\", a \"cooldown\" for installs, hardening against Shai-Hulud-class worms, or how to safely install a package that was just published. Also use after any recent supply-chain incident in the npm ecosystem.","version":2,"lift":{"pass_rate_delta_pts":43.48,"pass_rate_pct":91.3,"total_cases":23,"passed_cases":21,"tokens_delta_pct":54.9,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-28T02:04:31.678353+00:00"},"skill_score":0.9545,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":43.48,"with_pass_pct":91.3,"without_pass_pct":47.8,"tokens_delta_pct":54.9,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-28T02:04:31.678353+00:00","run_id":"82b8c635-0d26-4ce6-bada-1374e014dd8b","version_number":2,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"9e2246f6e4f8a5f3b0621b02c62c79cf65e0ad93fa51ec92c43b12af139bf275","raw_url":"https://app.decimal.ai/s/jamditis-supply-chain-hardening/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/jamditis-supply-chain-hardening"}