Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →leoyeai/agent-bom
Open security platform for agentic infrastructure — broad scanning plus MCP discovery, CVEs, blast radius, SBOMs, CIS benchmarks (AWS, Azure, GCP, Snowflake), OWASP/NIST/MITRE compliance, AISVS v1.0, MAESTRO layer tagging, and vector database security checks.
Passed 19 of 22 test cases with the skill, and 6 of 22 without it.
and 10 more in the full report
13 fixed6 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 13 test cases the skill fixed. Same model, same prompt, with and without the skill.
Can you run a CIS benchmark check against our AWS cloud account to evaluate our current infrastructure security posture? Please present the output as a detailed audit document detailing overall compliance scores across control frameworks, flagged misconfigurations, and necessary authorization steps.
| Checked | Without skill | With skill |
|---|---|---|
| Requests explicit user confirmation before executing cloud CIS benchmark scanning | Missed | Passed |
The instructions your model reads when the skill loads.
Discovers MCP clients and servers across 22 AI tools, scans for CVEs, maps blast radius, runs cloud CIS benchmarks, checks OWASP/NIST/MITRE compliance, generates SBOMs, and assesses AI infrastructure against AISVS v1.0 and MAESTRO framework layers.
pipx install agent-bom
agent-bom agents # auto-discover + scan
agent-bom check langchain==0.1.0 # check a specific package with version
agent-bom fs . # scan filesystem packages
agent-bom image nginx:1.25 # scan container image (native)
agent-bom cloud aws # AWS CIS benchmark
agent-bom iac infra/ # scan Terraform/CloudFormation
agent-bom where # show all discovery paths
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": ["agent-bom", "mcp"]
}
}
}
| Sub-Skill | Purpose | Triggers |
|---|---|---|
| discover | Find agents, MCP servers, configurations | "find agents", "what's configured", "mcp inventory" |
| scan | CVE scanning, image scanning, SBOM, provenance | "check package", "scan image", "verify", "blast radius" |
| scan-infra | IaC, cloud config, secrets scanning | "check terraform", "scan kubernetes", "find secrets" |
test cases passed, vs 6 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.