Configure install-time cooldowns for npm/bun (minimum release age) and run a sandboxed pre-install scan when the cooldown has to be bypassed. Use when the user asks about supply-chain attacks, npm/bun security, "minimum release age", a "cooldown" for installs, hardening against Shai-Hulud-class worms, or how to safely install a package that was just published. Also use after any recent supply-chain incident in the npm ecosystem.
How to install supply-chain-hardening?
jamditis/claude-skills-journalism/supply-chain-hardening
$npx -y skills add jamditis/claude-skills-journalism --skill supply-chain-hardeningInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Run `npx skills use "https://github.com/jamditis/claude-skills-journalism" --skill "jamditis/claude-skills-journalism/supply-chain-hardening"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/jamditis/claude-skills-journalism" that are relevant to the current task. Run `npx skills add "https://github.com/jamditis/claude-skills-journalism"` and select the relevant skills, then follow their instructions.
Related
6 picksType
- researchInvestigate a question against high-trust primary sources and capture the findings as a Markdown file in the repo.Jul 2026
- analyze-projectRigor Analyze / Rigor Audit read-only skill for deep learning research repositories.Jul 2026
- paper-context-resolverRigor Paper Context helper for README-first deep learning repo reproduction.Jul 2026
- repo-intake-and-planRigor Intake helper for README-first deep learning repo reproduction.Jul 2026
- firecrawl-searchWeb search with full page content extraction. Use this skill whenever the user asks to search the web, find articles, research a topic, look something up, find…Jul 2026
- customer-researchWhen the user wants to conduct, analyze, or synthesize customer research.Jul 2026
