Skip to content

koda-ai-studio/agent-bom

v0.110.0Apache-2.0

Inventory and audit your AI estate from the shell: scan MCP servers, agents and packages for CVEs, supply-chain risk and exposed credentials; audit MCP configs and skills for injection and risky grants; check a package before you add it; plan fixes. Runs a pinned local CLI; read-only by default.

activity

Review what the user's coding agents actually did with agent-bom - which MCP servers and tools Claude Code and Codex called, configured MCP servers that were never used, risky actions such as pipe-to-shell installs, force pushes, writes outside the project or reads of secret files, and packages the agents installed. Use when the user asks what their agents have been doing, which MCP servers are unused, or what risky commands their agents ran.

License
Apache-2.0
Read SKILL.md at the source

Pinned to revision e42d0d569d9b, so it is the text this page describes rather than whatever the author pushed since.

Files

Every link opens the file at its source, pinned to the revision this page describes.