Script gate (commit, agent write, CI) over npm, yarn, pnpm, bun, poetry, uv, Pipfile, Cargo, go.sum, Gemfile, composer and NuGet locks. Blocks: source off the registry list or not https, missing hash, hash changed for a locked version, unpinned git source, unreadable lock. Asks: SHA-1-only hash, transitive install script, lock or manifest moved alone, go.sum lines removed, lock ignored or deleted. Judges what a change adds. Friction, not a security boundary.
3 stars
0 votes
0 copies
0 views
Added October 2, 2026
ai-agentsgogitsecurity
Works with
cli
Security analysis
A96/100
mediumInstalls packages at runtime which could introduce malicious dependencies
Installs into .claude/skills of the current project.
Are you the author of Lockfile Integrity?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/open-coder-ai-lockfile-integrity)
---
name: lockfile-integrity
description: "Script gate (commit, agent write, CI) over npm, yarn, pnpm, bun, poetry, uv, Pipfile, Cargo, go.sum, Gemfile, composer and NuGet locks. Blocks: source off the registry list or not https, missing hash, hash changed for a locked version, unpinned git source, unreadable lock. Asks: SHA-1-only hash, transitive install script, lock or manifest moved alone, go.sum lines removed, lock ignored or deleted. Judges what a change adds. Friction, not a security boundary."
metadata:
chock.artifact: hook
chock.enforcement: block
chock.coverage_without_chock: advisory
---
# Lockfile Integrity
Script gate (commit, agent write, CI) over npm, yarn, pnpm, bun, poetry, uv, Pipfile, Cargo, go.sum, Gemfile, composer and NuGet locks. Blocks: source off the registry list or not https, missing hash, hash changed for a locked version, unpinned git source, unreadable lock. Asks: SHA-1-only hash, transitive install script, lock or manifest moved alone, go.sum lines removed, lock ignored or deleted. Judges what a change adds. Friction, not a security boundary.
```
on(commit|tool_use): block(script) paths=[pP][aA][cC][kK][aA][gG][eE]-[lL][oO][cC][kK].[jJ][sS][oO][nN]|*/[pP][aA][cC][kK][aA][gG][eE]-[lL][oO][cC][kK].[jJ][sS][oO][nN]|[nN][pP][mM]-[sS][hH][rR][iI][nN][kK][wW][rR][aA][pP].[jJ][sS][oO][nN]|*/[nN][pP][mM]-[sS][hH][rR][iI][nN][kK][wW][rR][aA][pP].[jJ][sS][oO][nN]|[yY][aA][rR][nN].[lL][oO][cC][kK]|*/[yY][aA][rR][nN].[lL][oO][cC][kK]|[pP][nN][pP][mM]-[lL][oO][cC][kK].[yY][aA][mM][lL]|*/[pP][nN][pP][mM]-[lL][oO][cC][kK].[yY][aA][mM][lL]|[bB][uU][nN].[lL][oO][cC][kK]|*/[bB][uU][nN].[lL][oO][cC][kK]|[pP][oO][eE][tT][rR][yY].[lL][oO][cC][kK]|*/[pP][oO][eE][tT][rR][yY].[lL][oO][cC][kK]|[uU][vV].[lL][oO][cC][kK]|*/[uU][vV].[lL][oO][cC][kK]|[pP][iI][pP][fF][iI][lL][eE].[lL][oO][cC][kK]|*/[pP][iI][pP][fF][iI][lL][eE].[lL][oO][cC][kK]|[cC][aA][rR][gG][oO].[lL][oO][cC][kK]|*/[cC][aA][rR][gG][oO].[lL][oO][cC][kK]|[gG][oO].[sS][uU][mM]|*/[gG][oO].[sS][uU][mM]|[gG][eE][mM][fF][iI][lL][eE].[lL][oO][cC][kK]|*/[gG][eE][mM][fF][iI][lL][eE].[lL][oO][cC][kK]|[gG][eE][mM][sS].[lL][oO][cC][kK][eE][dD]|*/[gG][eE][mM][sS].[lL][oO][cC][kK][eE][dD]|[cC][oO][mM][pP][oO][sS][eE][rR].[lL][oO][cC][kK]|*/[cC][oO][mM][pP][oO][sS][eE][rR].[lL][oO][cC][kK]|[pP][aA][cC][kK][aA][gG][eE][sS].[lL][oO][cC][kK].[jJ][sS][oO][nN]|*/[pP][aA][cC][kK][aA][gG][eE][sS].[lL][oO][cC][kK].[jJ][sS][oO][nN]|[pP][aA][cC][kK][aA][gG][eE].[jJ][sS][oO][nN]|*/[pP][aA][cC][kK][aA][gG][eE].[jJ][sS][oO][nN]|[pP][nN][pP][mM]-[wW][oO][rR][kK][sS][pP][aA][cC][eE].[yY][aA][mM][lL]|*/[pP][nN][pP][mM]-[wW][oO][rR][kK][sS][pP][aA][cC][eE].[yY][aA][mM][lL]|[pP][yY][pP][rR][oO][jJ][eE][cC][tT].[tT][oO][mM][lL]|*/[pP][yY][pP][rR][oO][jJ][eE][cC][tT].[tT][oO][mM][lL]|[pP][iI][pP][fF][iI][lL][eE]|*/[pP][iI][pP][fF][iI][lL][eE]|[cC][aA][rR][gG][oO].[tT][oO][mM][lL]|*/[cC][aA][rR][gG][oO].[tT][oO][mM][lL]|[gG][oO].[mM][oO][dD]|*/[gG][oO].[mM][oO][dD]|[gG][eE][mM][fF][iI][lL][eE]|*/[gG][eE][mM][fF][iI][lL][eE]|[gG][eE][mM][sS].[rR][bB]|*/[gG][eE][mM][sS].[rR][bB]|[cC][oO][mM][pP][oO][sS][eE][rR].[jJ][sS][oO][nN]|*/[cC][oO][mM][pP][oO][sS][eE][rR].[jJ][sS][oO][nN]|[dD][iI][rR][eE][cC][tT][oO][rR][yY].[pP][aA][cC][kK][aA][gG][eE][sS].[pP][rR][oO][pP][sS]|*/[dD][iI][rR][eE][cC][tT][oO][rR][yY].[pP][aA][cC][kK][aA][gG][eE][sS].[pP][rR][oO][pP][sS]|*.[gG][eE][mM][sS][pP][eE][cC]|*.[cC][sS][pP][rR][oO][jJ]|*.[fF][sS][pP][rR][oO][jJ]|*.[vV][bB][pP][rR][oO][jJ]|.gitignore|*/.gitignore|*[rR][eE][gG][iI][sS][tT][rR][yY]-[aA][lL][lL][oO][wW][lL][iI][sS][tT].[tT][xX][tT]* script=lockfile-integrity-gate.py
A lockfile change points a package somewhere other than its registry, drops or replaces its hash, leaves a git source unpinned, or moves the lock without the manifest that explains it. Regenerate the lock with the package manager from the registry (npm install, yarn, pnpm install, poetry lock, uv lock, cargo update -p, go mod tidy, bundle lock, composer update) and commit it with the manifest change. A person who has reviewed a private registry host adds it to .chock/registry-allowlist.txt and commits that first; an agent asks the person and never edits that file or the lock by hand.
```
This skill is advisory: the client reading it has no mechanism to enforce it. The same policy compiled by `chock` blocks at commit, on an agent's file writes and at turn end. See https://github.com/open-coder-ai/chock
