Drive PWN::AI::RedTeam::SupplyChain from pwn_eval.
Scanned 9/10/2026
Install to Claude Code
npx -y skills add 0dayInc/pwn --skill supply_chain --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Supply Chain?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/0dayinc-supply-chain)More formats (shields.io, HTML) on the badges page.
---
name: pwn-ai-redteam-supplychain
description: Drive PWN::AI::RedTeam::SupplyChain from pwn_eval.
license: MIT
allowed-tools: [pwn, pwn_eval]
metadata:
bundled: true
generated: true
module: PWN::AI::RedTeam::SupplyChain
source: pwn/ai/red_team/supply_chain.rb
---
# PWN::AI::RedTeam::SupplyChain
AI RedTeam Module used to probe LLM application supply-chain trust: tampered model artifacts, slopsquatted packages, MCP tool packages, and unsigned adapters (OWASP LLM04:2026).
## When to use
Call `PWN::AI::RedTeam::SupplyChain` from `pwn_eval` when the task needs this module.
Do not reimplement it in shell.
## Methodologies
Generated from `pwn/ai/red_team/supply_chain.rb`. Prefer the public class methods below.
Class methods take `(opts = {})` and read `opts`.
## How to call
```ruby
PWN::AI::RedTeam::SupplyChain.help
PWN::AI::RedTeam::SupplyChain.scan(opts)
```
## Public methods
- `scan`
- `security_references`
- `authors`
- `help`
## References
- `references/security.md` — CWE / NIST mapping
- `references/urls.md` — URLs from source
## Source
`pwn/ai/red_team/supply_chain.rb`
## Verification
`PWN::AI::RedTeam::SupplyChain.respond_to?(:scan)` after the
module is loaded. Read the source for parameter names.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Java Spring Boot 服务中关于身份验证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全的 Spring Security 最佳实践。
Create, comment on, update, and list Paperclip tasks from Hermes using scoped Paperclip API credentials.
Write a short, colloquial summary for a Paperclip summary slot: open with the 1–3 specific, concrete actions the reader needs to take right now to unblock the work, then a brief plain-language status, streaming progress as it works.
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.