maxtac-supply-chain-compromise-hunt

You can investigate a supply chain compromise by analyzing package metadata and release artifacts, freezing evidence with the package-freeze.py script, and following a structured workflow to document and mitigate the compromise.

Evidence freezing in package security creates a durable manifest of package metadata and release assets, preserving the exact state of suspicious artifacts for structured analysis and later review.

Yes, you need Python installed because the skill requires the package-freeze.py script for evidence freezing and executing the structured analysis workflow to detect supply chain compromises in dependencies.

You should use a structured analysis workflow for compromise detection when a suspicious package or release artifact is identified and you need to systematically investigate and document potential supply chain compromises.

The best way to document release artifact metadata is to use the evidence freezing feature, which creates a durable manifest of package metadata and release assets to preserve the exact state for investigation.