{"slug":"masriyan-supply-chain-security","source_name":"masriyan/Supply Chain Security","name":"Masriyan/Supply Chain Security","description":"Software supply chain security — SBOM generation and analysis, dependency confusion and typosquatting detection, malicious package indicators, CI/CD pipeline hardening, and artifact provenance/signing (SLSA, Sigstore)","version":2,"lift":{"pass_rate_delta_pts":8.33,"pass_rate_pct":91.7,"total_cases":24,"passed_cases":22,"tokens_delta_pct":89.8,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-10-10T21:46:47.675551+00:00"},"skill_score":0.9167,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":8.33,"with_pass_pct":91.7,"without_pass_pct":83.3,"tokens_delta_pct":89.8,"turns_delta_pct":0,"total_cases":24,"cases_aggregated":24,"verdict":"mixed","never_hurt":true,"completed_at":"2026-10-10T21:46:47.675551+00:00","run_id":"2f42bb11-2749-46d0-ac35-52df121cd708","latest_attempt":{"id":"2f42bb11-2749-46d0-ac35-52df121cd708","runner_model":"gemini-3.6-flash","overall_verdict":"mixed","completed_at":"2026-10-10T21:46:47.675551+00:00","gate":null},"version_number":1,"is_latest_version":false,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"total_uses":0,"total_users":0,"manifest_hash":"c8175e9e0e769ffe0da8c6b6767c8ceb4e98914a2da72c639ab0e62817b03ffa","install_name":"masriyan-supply-chain-security","version_id":"79485936-2e59-4307-956a-adf7e1e988db","body_sha256":"c8175e9e0e769ffe0da8c6b6767c8ceb4e98914a2da72c639ab0e62817b03ffa","render_hash":"c6c4d7998417a41afc5615d1af94fc28d9c95d0132210a68e981e25284b47e91","raw_url":"https://app.decimal.ai/s/masriyan-supply-chain-security/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/masriyan-supply-chain-security"}