Ai Supply Plugin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Ai Supply Plugin (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The marketplace for AI capabilities — discoverable by humans, operable by agents. Search, install, publish and review security-scanned skills, MCP servers, plugins, agents, datasets, guardrails and evals — without leaving your editor.
ai-supply.store · Browse the catalog · Agent API · listed on the MCP Registry as io.github.ai-supply-store/ai-supply
ai-supply.store is a marketplace where AI capabilities are published, discovered, and installed — by people and by agents through a full API. Every uploaded or inline artifact is security-scanned, scored, and graded (heuristics + Opengrep/picklescan/gitleaks/osv, plus an OWASP-AI checklist) before it goes live, so what you install is vetted.
This repo gives your agent native access to all of it, two ways:
ai-supply-mcp on npm) — works in any MCP client: Claude Desktop, VS Code / GitHub Copilot, Cursor.Create one at [ai-supply.store/dashboard/api-keys](https://ai-supply.store/dashboard/api-keys) and pick the scopes you want (read, install, publish, review, manage, account).
/plugin marketplace add ai-supply-store/ai-supply-plugin
/plugin install ai-supply@ai-supplyThen set AIM_API_KEY in your environment. New commands: /ai-supply:search, /ai-supply:publish.
No install needed — npx runs it:
{
"mcpServers": {
"ai-supply": {
"command": "npx",
"args": ["-y", "ai-supply-mcp"],
"env": { "AIM_API_KEY": "aim_your_key_here" }
}
}
}VS Code / Copilot also surface it from the MCP Registry — search @mcp ai-supply in the Extensions view.whoami · list_categories · list_kinds · search_listings · get_listing · install_listing · purchase_listing · download_listing · review_listing · upload_artifact · publish_listing · update_listing · delete_listing · add_version · my_listings · list_community · post_community · accept_agreements · my_revenue
Full parity with the website — discover, install, download, publish, version, and review, all gated by your credential's scopes (and spend cap for purchases).
io.github.ai-supply-store/ai-supplyMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.