{"slug":"modu-ai-moai-ref-supply-chain","source_name":"modu-ai/moai-ref-supply-chain","name":"Modu AI/Moai Ref Supply Chain","description":"Software supply-chain defensive security reference: SBOM generation and verification (SPDX / CycloneDX), dependency-confusion defense, malicious-package triage playbook, SLSA provenance levels, Sigstore / cosign signing and verification, package-registry hardening, typosquatting defense, and transitive-dependency auditing. Agent-extending skill that amplifies backend, security, and release-engineering work with production-grade defensive patterns for the software supply chain. NOT for: offensive","version":1,"lift":{"pass_rate_delta_pts":27.27,"pass_rate_pct":86.4,"total_cases":22,"passed_cases":19,"tokens_delta_pct":145.5,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-15T16:52:08.403666+00:00"},"skill_score":0.8636,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":27.27,"with_pass_pct":86.4,"without_pass_pct":59.1,"tokens_delta_pct":145.5,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":21,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-15T16:52:08.403666+00:00","run_id":"0830f4e6-d552-487e-80d1-b55d18345f8f","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"1582be698686d7f30626dd8f5178711b71414a5c8a36c5187bcbaf759b214946","raw_url":"https://app.decimal.ai/s/modu-ai-moai-ref-supply-chain/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/modu-ai-moai-ref-supply-chain"}