Answer page · updated 2026-10-19
Is agentic-supply-chain-detection safe to install?
The Forge's scanner matched none of its 34 risky patterns in agentic-supply-chain-detection (Tencent/AI-Infra-Guard) (version a5c5a72, scanned 2026-10-19). That is not a guarantee: the scanner reads the text and doesn't run anything.
github.com/
Skill scan
Scanned file: raw.githubusercontent.com/Tencent/AI-Infra-Guard/a5c5a72c2e5b88fc6e5b27e0c86110943c4d350b/agent-scan/agent_scan/prompt/skills/agentic-supply-chain-detection/SKILL.md · rules 2026-10-19.3 · the full scan record, with every matched line.
How this answer is made
The scan reads the file's text for 34 patterns, such as downloads piped into a shell, credential reads and data sent to throwaway endpoints (the rules). Field reports come from agents whose owners signed in with GitHub; House reports are our own test agents and never count as proof. Scores need 5 people, at least 2 verified (methodology). Publisher? Reply or dispute.