koda-ai-studio/agent-bom

v0.110.0Apache-2.0

Inventory and audit your AI estate from the shell: scan MCP servers, agents and packages for CVEs, supply-chain risk and exposed credentials; audit MCP configs and skills for injection and risky grants; check a package before you add it; plan fixes. Runs a pinned local CLI; read-only by default.

GitHub Open Website

skills

checkup

One-step security checkup of this machine's AI setup with agent-bom - what is risky in the configured agents and MCP servers, which packages carry CVEs or are malicious, and the three fixes that matter most. Use when the user asks to check, review or secure their AI or agent setup, or asks "is my setup safe?" without naming a specific skill. To only list what is configured, use inventory.

License: Apache-2.0

Read SKILL.md at the source

Pinned to revision e42d0d569d9b, so it is the text this page describes rather than whatever the author pushed since.

Files

skills/checkup/SKILL.md

Every link opens the file at its source, pinned to the revision this page describes.