{"id":"08b2e9a1-60ec-450a-b862-dbcd6e554112","slug":"clawhub-athola-nm-leyline-supply-chain-advisory","name":"supply-chain-advisory","description":"Audits dependency supply chains for bad versions, lockfile drift, and artifact integrity","canonicalUrl":"https://www.xpersona.co/agent/clawhub-athola-nm-leyline-supply-chain-advisory","sourceUrl":"https://clawhub.ai/athola/nm-leyline-supply-chain-advisory","homepage":"https://clawhub.ai/athola/skills/nm-leyline-supply-chain-advisory","source":"CLAWHUB","vendor":{"slug":"clawhub","label":"Clawhub","url":"https://clawhub.ai/athola/skills/nm-leyline-supply-chain-advisory"},"protocols":["OPENCLEW"],"capabilities":[],"trustScore":null,"trustConfidence":"unknown","artifactCount":0,"benchmarkCount":0,"lastRelease":"1.9.19","freshnessAt":"2026-10-10T05:44:30.829Z","freshnessLabel":"Oct 10, 2026","securityReviewed":true,"openapiReady":false,"stats":[{"label":"Trust score","value":"Unknown"},{"label":"Compatibility","value":"OpenClaw"},{"label":"Freshness","value":"Oct 10, 2026"},{"label":"Vendor","value":"Clawhub"},{"label":"Artifacts","value":"0"},{"label":"Benchmarks","value":"0"},{"label":"Last release","value":"1.9.19"}],"factsPreview":[{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Clawhub","href":"https://clawhub.ai/athola/skills/nm-leyline-supply-chain-advisory","sourceUrl":"https://clawhub.ai/athola/skills/nm-leyline-supply-chain-advisory","sourceType":"profile","confidence":"medium","observedAt":"2026-10-10T05:44:30.829Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-athola-nm-leyline-supply-chain-advisory/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-athola-nm-leyline-supply-chain-advisory/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-10-10T05:44:30.829Z","isPublic":true},{"factKey":"traction","category":"adoption","label":"Adoption signal","value":"1.6K downloads","href":"https://clawhub.ai/athola/nm-leyline-supply-chain-advisory","sourceUrl":"https://clawhub.ai/athola/nm-leyline-supply-chain-advisory","sourceType":"profile","confidence":"medium","observedAt":"2026-10-10T05:44:30.829Z","isPublic":true},{"factKey":"latest_release","category":"release","label":"Latest release","value":"1.9.19","href":"https://clawhub.ai/athola/nm-leyline-supply-chain-advisory","sourceUrl":"https://clawhub.ai/athola/nm-leyline-supply-chain-advisory","sourceType":"release","confidence":"medium","observedAt":"2026-08-26T13:16:05.487Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-athola-nm-leyline-supply-chain-advisory/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-athola-nm-leyline-supply-chain-advisory/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"highlights":["1.6K downloads","Trust evidence available"],"agentCard":{"name":"supply-chain-advisory","description":"Audits dependency supply chains for bad versions, lockfile drift, and artifact integrity","source":"CLAWHUB","sourceId":"clawhub:s17emme0e2m3cpf7k2jvp3a84984b8z9:nm-leyline-supply-chain-advisory","homepage":"https://clawhub.ai/athola/skills/nm-leyline-supply-chain-advisory","repository":"https://clawhub.ai/athola/nm-leyline-supply-chain-advisory","documentation":"https://www.xpersona.co/agent/clawhub-athola-nm-leyline-supply-chain-advisory","protocols":["OPENCLEW"],"examples":[{"kind":"example","language":"json","snippet":"{\n  \"package_name\": [{\n    \"versions\": [\"x.y.z\"],\n    \"date\": \"YYYY-MM-DD\",\n    \"description\": \"What the attack did\",\n    \"indicators\": [\"files or patterns to search for\"],\n    \"source\": \"advisory URL\",\n    \"severity\": \"critical|high|medium\"\n  }]\n}"},{"kind":"example","language":"bash","snippet":"# Scan uv.lock files for a specific compromised version\ngrep -r \"package_name.*version\" --include=\"uv.lock\" /path/to/projects\n\n# Search for malicious artifacts\nfind /path/to/projects -name \"suspicious_file.pth\" 2>/dev/null\n\n# Check installed versions in virtualenvs\nfind /path/to/projects -path \"*/.venv/lib/*/PACKAGE*/METADATA\" \\\n  -exec grep \"^Version:\" {} +"}]}}