Activate when reviewing or modifying dependency resolution, lockfile schema, package downloaders, signature/integrity checks, file integration cleanup, or anything that could expose APM to dependency confusion, typosquatting, malicious packages, or token leakage.
SkillScore100Maintained
Automatic
◆Security & AppSec pack
Last verified 8/7/2026
What it changes
Passed 22 of 22 test cases with the skill, and 8 of 22 without it.
Without skill36%
With skill100%
Checks it passed that the model alone missed
The response uses AuthResolver for token retrieval.
The response uses AuthResolver to retrieve credentials.
The response forbids raw os.getenv calls for token variables.
and 15 more in the full report
14 fixed8 passed either way0 still failing0 broke
Pass-rate lift
+64 pp
Tokens
-16%
Agent turns
0%
Response time
-30%
Model gemini-3.6-flashMeasured 8/7/2026v122 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 14 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 14
Prompt
We are building an update script in `src/apm_cli/integration/deploy.py`. We need to purge existing deployed assets before applying the new version. What function should be called?
What was checked, without and with the skill
Checked
Without skill
With skill
The response specifies calling remove_stale_deployed_files in integration/cleanup.py.
Missed
Passed
case-19 · gemini-3.6-flash · 8/7/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md27 linessingle file
Supply Chain Security Skill
Supply chain security expert persona
When to activate
Changes under src/apm_cli/deps/ (resolver, lockfile, downloaders)
Changes to src/apm_cli/core/auth.py or token_manager.py
Changes to src/apm_cli/integration/cleanup.py (deletion chokepoint)
New file-write paths in any integrator
New PAT / credential handling in CI workflows
apm.lock schema changes
Any code that fetches, verifies, or executes content from a remote
source
Key rules
All path construction routes through
src/apm_cli/utils/path_security.py (no ad-hoc ".." in x).
All deletions of deployed files route through
integration/cleanup.py:remove_stale_deployed_files() (3 safety
gates).
All credential reads route through AuthResolver -- never raw
os.getenv for token vars.
Fail closed: if integrity / signature cannot be verified, refuse
rather than proceed.
Token values must never appear in user-facing strings.