Decision aid for verifying that the code you ship is the code you think you're shipping. Use when designing or reviewing systems whose threat model includes supply-chain compromise (build host, dependency mirror, package registry, firmware) — which is most production systems in 2026.
Supply Chain Trust is a community-contributed Claude Code skill in the general-misc sub-category. It ships as a SKILL.md file that Claude Code auto-discovers under ~/.claude/skills/supply-chain-trust/ and loads when your prompt matches the skill's trigger.
The Supply Chain Trust skill is built for Claude Code users and developers across all disciplines looking for general-purpose AI assistance. It is part of the open ClaudSkills registry, a community-curated catalog of 56,000+ capabilities you can install for Claude Code — the Claude CLI agent.
mkdir -p ~/.claude/skills/supply-chain-trust curl -L https://claudskills.com/skills/supply-chain-trust/SKILL.md \ -o ~/.claude/skills/supply-chain-trust/SKILL.md
Or just download SKILL.md directly and drop it into ~/.claude/skills/supply-chain-trust/. Claude Code auto-discovers it on next session.
Skills live at ~/.claude/skills/supply-chain-trust/SKILL.md on macOS/Linux, or %USERPROFILE%\.claude\skills\supply-chain-trust\SKILL.md on Windows. See the full install guide for step-by-step instructions.
The ClaudSkills desktop app installs any skill directly into ~/.claude/skills/ with one click — no terminal required. Pro starts at $9/mo or $149 lifetime.
For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.
Browse all General skills in the ClaudSkills registry, or explore these other picks from the same category:
Part of Acreator Store — Adam Lankamer's AI tools: GifPerfect · AspectPerfect · SlomoPerfect · Ucaption · UTagger · AutoXPoster · TestYourSkills