# open-source-supply-chain-risk-mcp

> open-source-supply-chain-risk-mcp — apifyforge-open-source-supply-chain-risk-mcp. Use this tool when you need to analyze and mitigate supply chain risks in open-source projects, as it provides direct access to CVE records, CISA KEV exploits, and other live intelligence sources to identify potential vulnerabilities. It solves problems related to dependency management, security, and maintainability, offering outputs such as risk scores and typosquat detection reports. Ideal for use in git-based development workflows, this tool helps ensure the security and reliability of open-source components.

Canonical page: https://skillsregistry.net/skills/apifyforge-open-source-supply-chain-risk-mcp  
JSON: https://api.skillsregistry.net/v1/skills/apifyforge-open-source-supply-chain-risk-mcp

## Description

Open source supply chain risk analysis via MCP — give your AI agent direct access to CVE records, CISA KEV exploits, maintainer bus-factor scores, and typosquat detection across 7 live intelligence sources.

## Trust

- **Trust score (0–1):** 1.00
- **Verification tier:** verified
- **Last scanned:** 2026-09-28

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** container
- **Runtime environment:** vm
- **License:** MIT
- **Updated:** 2026-09-28

## Source

- **Source listing:** [GitHub](https://github.com/apifyforge/open-source-supply-chain-risk-mcp)

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "apifyforge-open-source-supply-chain-risk-mcp"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/apifyforge-open-source-supply-chain-risk-mcp` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/apifyforge-open-source-supply-chain-risk-mcp/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt