koda-ai-studio/agent-bom

v0.110.0Apache-2.0

Inventory and audit your AI estate from the shell: scan MCP servers, agents and packages for CVEs, supply-chain risk and exposed credentials; audit MCP configs and skills for injection and risky grants; check a package before you add it; plan fixes. Runs a pinned local CLI; read-only by default.

GitHub Open Website

skills

bom

Generate an AI-BOM (CycloneDX or SPDX) with agent-bom for this machine's agents and MCP servers, a project, a container image, a repository, or an AWS, Azure or GCP account - agents, MCP servers, tools, models and packages with their relationships and known vulnerabilities. Use when the user asks for an AI-BOM, agent BOM, SBOM, ML-BOM or an inventory file to share or attach.

License: Apache-2.0

Read SKILL.md at the source

Pinned to revision e42d0d569d9b, so it is the text this page describes rather than whatever the author pushed since.

Files

skills/bom/SKILL.md

Every link opens the file at its source, pinned to the revision this page describes.