I Built an Offline Supply-Chain Auditor for Claude Code Mods (stdlib-only Python)

Your Claude Code mods run shell commands with your privileges. A lifecycle hook is one curl | sh away...