{"slug":"majiayu000-npm-supply-chain-check","source_name":"majiayu000/npm-supply-chain-check","name":"Majiayu000/npm Supply Chain Check","description":"Detect known malicious npm package versions and install-time supply-chain indicators in repositories, lockfiles, and node_modules. Use when a user mentions an npm compromise, Shai-Hulud, the Keyv/cacheable incident, suspicious preinstall scripts, credential-stealing packages, or asks whether a JavaScript project was exposed to a package supply-chain attack. Do not use as a general CVE or license audit.","version":1,"lift":{"pass_rate_delta_pts":9.09,"pass_rate_pct":68.2,"total_cases":22,"passed_cases":15,"tokens_delta_pct":34.6,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-09-04T05:29:18.359396+00:00"},"skill_score":0.6818,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":9.09,"with_pass_pct":68.2,"without_pass_pct":59.1,"tokens_delta_pct":34.6,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":17,"verdict":"mixed","never_hurt":false,"completed_at":"2026-09-04T05:29:18.359396+00:00","run_id":"4cf5f795-e6d5-4297-bb12-a640044c94f8","latest_attempt":{"id":"4cf5f795-e6d5-4297-bb12-a640044c94f8","runner_model":"gemini-3.6-flash","overall_verdict":"mixed","completed_at":"2026-09-04T05:29:18.359396+00:00","gate":null},"version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"total_uses":1,"total_users":1,"manifest_hash":"014dcfac60c5879a22cfd816cf2eec234189cdc87e16d2f18273074155e81ad7","install_name":"majiayu000-npm-supply-chain-check","version_id":"b0126faf-c40a-41cc-a757-022b237a6789","body_sha256":"014dcfac60c5879a22cfd816cf2eec234189cdc87e16d2f18273074155e81ad7","render_hash":"985feb1f5605e636c8bdcb328aaad0e25e4225b51ea30aaa597118d280ad072c","raw_url":"https://app.decimal.ai/s/majiayu000-npm-supply-chain-check/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/majiayu000-npm-supply-chain-check"}