# open-source-software-supply-chain-mcp

> open-source-software-supply-chain-mcp — apifyforge-open-source-software-supply-chain-mcp. Use this tool when you need to assess and manage open-source software supply chain risks beyond traditional CVE scanning. It aggregates live data from multiple sources, including GitHub, NVD, and CISA KEV, to provide comprehensive risk insights for AppSec teams, engineering leads, and platform engineers. Ideal for use cases requiring in-depth vulnerability analysis and mitigation strategies, this tool offers a robust interface for inputting project dependencies and outputting actionable risk assessments.

Canonical page: https://skillsregistry.net/skills/apifyforge-open-source-software-supply-chain-mcp  
JSON: https://api.skillsregistry.net/v1/skills/apifyforge-open-source-software-supply-chain-mcp

## Description

Open source supply chain risk assessment for AppSec teams, engineering leads, and platform engineers who need more than a CVE scanner. This MCP server aggregates 7 live data sources — GitHub, NVD, CISA KEV, StackExchange, Hacker News, Federal Register, and Congress.

## Trust

- **Trust score (0–1):** 1.00
- **Verification tier:** verified
- **Last scanned:** 2026-09-28

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** container
- **Runtime environment:** vm
- **License:** MIT
- **Updated:** 2026-09-28

## Source

- **Source listing:** [GitHub](https://github.com/apifyforge/open-source-software-supply-chain-mcp)

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "apifyforge-open-source-software-supply-chain-mcp"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/apifyforge-open-source-software-supply-chain-mcp` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/apifyforge-open-source-software-supply-chain-mcp/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt