msaad00/agent-bom
19 skills
$npx skills add msaad00/agent-bomSkillInstalls
analyzeAnalyze blast radius, attack paths, and threat landscape across your AI infrastructure.complianceAI compliance and policy engine — evaluate scan results against OWASP, NIST, SOC 2, ISO 27001, CMMC, EU AI Act, AISVS v1.0, and related frameworks.cortex-codeOpen security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust across MCP servers, skills, packages, and agents in…discoverDiscover AI agents, MCP servers, and configurations on this machine or environment.discover-awsDiscover AWS-hosted AI agent and MCP-relevant assets from the operator's environment, emit canonical agent-bom inventory JSON, and scan it without giving…discover-azureDiscover Azure-hosted AI agent and MCP-relevant assets from the operator's environment, emit canonical agent-bom inventory JSON, and scan it without giving…discover-gcpDiscover GCP-hosted AI agent and MCP-relevant assets from the operator's environment, emit canonical agent-bom inventory JSON, and scan it without giving…discover-snowflakeDiscover Snowflake Cortex, Snowpark, notebook, Streamlit, MCP, and AI-observability assets from the operator's environment, emit canonical agent-bom inventory…enforceEnforce security policies on MCP tool calls and block dangerous operations at runtime.ingestValidate and ingest operator-pushed agent-bom inventory JSON from AWS, Azure, GCP, Snowflake, CMDB, or endpoint collectors.missing-guardrailmonitorMonitor agent fleet, track trust scores, and manage lifecycle states.openclawOpen security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust across MCP discovery, CVEs, SBOMs, CIS benchmarks…registryMCP server security registry and trust assessment — look up servers in the 1013-entry server security metadata registry, run pre-install marketplace checks,…runtimeAI runtime security monitoring — context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries.scanOpen security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container…scan-infraScan infrastructure-as-code, cloud configurations, and find secrets.troubleshootDiagnose issues, check prerequisites, and validate configurations.vulnerability-intelUse agent-bom to check package, SBOM, inventory, and agent dependency exposure against OSV, GitHub Security Advisories, NVD, EPSS, and CISA KEV with explicit…