Open Source Supply Chain Risk Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Open Source Supply Chain Risk Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Assess open source software supply chain risk including dependency vulnerabilities, maintainer trust, license compliance, and typosquatting detection.
| Tool | Description |
|---|---|
map_dependency_network | Map OSS dependency network with vulnerability connectivity |
assess_maintainer_risk | Assess maintainer bus factor and abandonment risk |
detect_vulnerability_propagation | Detect CVE/KEV vulnerability propagation through dependencies |
analyze_community_health | Analyze OSS community health from discussions and sentiment |
score_supply_chain_risk | Multi-factor OSS supply chain risk score |
detect_typosquat_indicators | Detect potential typosquatting packages |
assess_research_security_landscape | Assess security research landscape from papers and discussions |
generate_oss_risk_report | Comprehensive OSS supply chain risk report |
Cybersecurity
Add to claude_desktop_config.json:
{
"mcpServers": {
"open-source-supply-chain-risk-mcp": {
"url": "https://ryanclinton--open-source-supply-chain-risk-mcp.apify.actor/mcp",
"headers": {
"Authorization": "Bearer YOUR_APIFY_TOKEN"
}
}
}
}Add to .cursor/mcp.json:
{
"mcpServers": {
"open-source-supply-chain-risk-mcp": {
"url": "https://ryanclinton--open-source-supply-chain-risk-mcp.apify.actor/mcp",
"headers": {
"Authorization": "Bearer YOUR_APIFY_TOKEN"
}
}
}
}Add to your MCP configuration:
{
"mcpServers": {
"open-source-supply-chain-risk-mcp": {
"serverUrl": "https://ryanclinton--open-source-supply-chain-risk-mcp.apify.actor/mcp",
"headers": {
"Authorization": "Bearer YOUR_APIFY_TOKEN"
}
}
}
}This server requires an Apify API token. Get yours free at Apify Console.
Pay-per-use via Apify. See the Apify Store listing for pricing details.
cybersecurity supply-chain open-source vulnerability sbom
Proprietary - available via Apify Store.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.