Install payload
Install payload is broadly covered in current results.
100% (5/5)
Browse the directory
/
Showing 5 resources for "provenance"
Saved
/ search · [ ] view density · esc clear input
Active
Source-backed filter active — add entries to compare trust side by side.
Trust snapshot
5 results in this view
Claimed
0%(0/5)
2 trust signals differ in this sample: Source provenance, Submitter
Signals differ on Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
2 rollout risk signals in current results
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
good
Most at-risk entries in this view
- 67%
Agent Skills Retrieval Source Verification Capability Pack Skill
No required rollout gaps
- 67%
GitHub Artifact Attestation Provenance Capability Pack Skill
No required rollout gaps
- 67%
Lockfile Provenance Checker - Claude Code Hook
No required rollout gaps
- 67%
Reg-suit Visual Regression Review Capability Pack Skill
No required rollout gaps
- 67%
SLSA Provenance Review Capability Pack Skill
No required rollout gaps
Adoption queue
Browse adoption queue · balanced
0/5 visible results are ready for staged adoption under this preset.
ready 0caution 5hold 0
Agent Skills Retrieval Source Verification Capability Pack Skill
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/agent-skills-retrieval-source-verification-capability-pack · trust review · confidence 67%
GitHub Artifact Attestation Provenance Capability Pack Skill
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/github-artifact-attestation-provenance-capability-pack · trust review · confidence 67%
Lockfile Provenance Checker - Claude Code Hook
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/lockfile-provenance-checker · trust review · confidence 67%
Reg-suit Visual Regression Review Capability Pack Skill
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/reg-suit-visual-regression-review-capability-pack · trust review · confidence 67%
SLSA Provenance Review Capability Pack Skill
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/slsa-provenance-review-capability-pack · trust review · confidence 67%
Decision confidence
Decision confidence scan · balanced
0/5 results are high-confidence for the selected preset.
high 0medium 5low 0
Agent Skills Retrieval Source Verification Capability Pack Skill
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
skills/agent-skills-retrieval-source-verification-capability-pack · trust review
GitHub Artifact Attestation Provenance Capability Pack Skill
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
skills/github-artifact-attestation-provenance-capability-pack · trust review
Lockfile Provenance Checker - Claude Code Hook
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
hooks/lockfile-provenance-checker · trust review
Reg-suit Visual Regression Review Capability Pack Skill
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
skills/reg-suit-visual-regression-review-capability-pack · trust review
SLSA Provenance Review Capability Pack Skill
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
skills/slsa-provenance-review-capability-pack · trust review
Freshness distribution
Current results are broadly fresh
Median age 54 days; all 5 scanned entries are within 90 days.
Theme distribution
Results center on provenance
80% of this view shares the top theme. Leading themes: provenance, supply-chain, capability-pack.
- provenance80% (4)
- supply-chain60% (3)
- capability-pack40% (2)
- agent-skills20% (1)
- artifact-attestations20% (1)
- content-review20% (1)
- github-actions20% (1)
- lockfile20% (1)
19 distinct themes across 5 scanned
Expert agent skills retrieval source verification capability pack for validating canonical URLs, documentation reachability, repo provenance, and duplicate source claims before publishing or submitting Claude Code skills.
Expert skill for reviewing GitHub Artifact Attestations, release artifact digests, workflow provenance, OIDC boundaries, and public release evidence before an AI agent recommends or publishes build outputs.
PostToolUse hook that inspects an edited npm package-lock.json for supply-chain provenance risk rather than known CVEs — dependencies resolved from outside the public npm registry (git, alternate-registry, or insecure transports) and registry tarballs missing an integrity hash.
Expert reg-suit review skill for evaluating rendered UI image baselines, thresholds, snapshot storage, report artifacts, and visual QA release readiness.
Expert SLSA provenance review skill for checking source, build, artifact, and trust evidence before accepting content or package submissions.