Supply chain

Review what the agents install before it runs, and contain what should not.

Skills, MCP servers, extensions and packages arrive on developer machines without a ticket. ZYBE lists each one the moment it is installed, matches it against known vulnerabilities, has an AI reviewer read it for hidden instructions, and holds it for review.