Block known-malicious npm, PyPI, and Poetry packages via a client-side firewall.
npx skills add https://github.com/zcaceres/skills --skill scfw
Please help me install this Agent Skill. Skill: scfw Source: https://github.com/zcaceres/skills/tree/main/plugins/security/skills/scfw Command: npx skills add https://github.com/zcaceres/skills --skill scfw
This skill protects your development environment by intercepting package manager commands to block known-malicious dependencies before they are installed on your machine.
Run the security scfw setup command to configure your shell and enable the firewall for your package managers.
High-intent search queries and answers about installing and using this skill.
A supply-chain firewall blocks known-malicious packages by intercepting package manager commands and checking dependencies against malicious package datasets and OSV.dev before allowing installation.
To set up the supply-chain firewall, run the security setup command to configure your shell environment, which enables the firewall to automatically intercept and vet your Poetry and pip installation commands.
Yes, pipx and jq are required dependencies. You need them along with shell environment configuration to successfully intercept package manager execution and vet dependencies against known-bad registries.
Yes, you can audit currently installed npm and Python packages using the provided audit tools, which review your environment and check logs of blocked or warned installation attempts against known-bad registries.
Yes, the client-side firewall works with npm, pip, and Poetry. It automatically routes installation commands for these package managers through a security gate that checks against OSV.dev and malicious package datasets.
Benmore-StudioAutomate macOS/Linux terminal setup with CLI tools and shell configuration.
koach08Audit npm and pip dependencies for vulnerabilities and malicious patterns.
GeneralReasoningScan dependency lock files offline with Trivy and JSON output.
sadie100Audit infrastructure, applications, and development processes for security vulnerabilities.
