Secrets & supply chain

The top-rated launch-quality Secrets & supply chain skill for AI agents is secleak-check (grade B), followed by container-cve-validator and specstory-guard. Skillspace rates 456 Secrets & supply chain skills; 64 are launch-quality.

Secret management, SBOMs, signing, dependency provenance and package security.

Launch-quality skills first, then by grade, then by our Skill Score, which adds judge reviews, test results, GitHub stars and adoption.

  1. secleak-check B
  2. container-cve-validator B
  3. specstory-guard B
  4. td-supply-chain-audit B
  5. implementing-delinea-secret-server-for-pam B
  6. supply-chain-audit C
  7. adobe-observability C
  8. gcp-production-secret-handler C
  9. aws-sdk-java-v2-kms C
  10. managing-cargo-dependencies C
  11. adobe-debug-bundle C
  12. adobe-known-pitfalls C
  13. cve-doctor C
  14. security-check C
  15. infisical-secret-syncs C
  16. infisical-user-setup-guide C
  17. phx:deps-audit C
  18. implementing-rsa-key-pair-management C
  19. infisical-agent C
  20. infisical-dynamic-secrets C
  21. sap-dependency-security C
  22. rot13-encryption C
  23. performing-service-account-credential-rotation C
  24. implementing-api-key-security-controls C
  25. depsguard C

Frequently asked questions

What is the best Secrets & supply chain skill for AI agents?

The top-rated launch-quality Secrets & supply chain skill for AI agents is secleak-check (grade B), followed by container-cve-validator and specstory-guard. Skillspace rates 456 Secrets & supply chain skills; 64 are launch-quality.

How does Skillspace rate Secrets & supply chain skills?

Skillspace grades every Secrets & supply chain skill from A to F with a published scoring engine that reads the skill's SKILL.md: architecture and maturity make the score, and a security scan can cap it. In crowded categories, a judge model also compares the strongest contenders side by side, and some skills are tested head-to-head on real tasks against other skills in the same category (including a deliberately weak one) and a no-skill baseline. Launch-quality skills are graded A to C with a clean safety verdict, and not excluded by a quality filter: the filters catch skills our model's safety screen flags for prompt injection, guardrail bypass, harmful content or credential exposure; test fixtures and attack benchmarks; skills written only for the repository they live in; templates and stubs; and near-duplicate variants and copies of other skills. Ratings were last updated on 24 September 2026; the full method is on the methodology page.

Are Secrets & supply chain skills safe to install?

Of the 456 Secrets & supply chain skills Skillspace rates, 318 passed its safety scan with no flag from its model, and 138 are flagged: 15 for review, 100 as risky, 21 as unsafe and 2 as attack benchmarks. Each skill's page shows its safety verdict. A pass is not a guarantee: the scan reads only the skill's SKILL.md, not the scripts or other files it ships, and looks for patterns such as piping a remote script into a shell, reading credentials or hiding actions from the user. Skills are third-party code that Skillspace indexes but does not host or endorse, so read a skill's source on GitHub before you install it.

Skillspace indexes and rates skills; it does not host or endorse them. Run third-party skills at your own risk.