{"slug":"performing-supply-chain-attack-simulation","source_name":"performing-supply-chain-attack-simulation","name":"Performing Supply Chain Attack Simulation","description":"Simulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning with pip-audit.","version":1,"lift":{"pass_rate_delta_pts":13.64,"pass_rate_pct":27.3,"total_cases":22,"passed_cases":6,"tokens_delta_pct":-11.1,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T11:37:51.695728+00:00"},"skill_score":0.2727,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":13.64,"with_pass_pct":27.3,"without_pass_pct":13.6,"tokens_delta_pct":-11.1,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-07-28T11:37:51.695728+00:00","run_id":"93bbf94c-9d9c-41ee-b1a7-59b7c918713e","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"f8d21ace8f83accb11d9e764895eeae26644c7acf44a7eb7d70563105c61c60d","raw_url":"https://app.decimal.ai/s/performing-supply-chain-attack-simulation/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/performing-supply-chain-attack-simulation"}