What is agent-bom-scan?

A software supply-chain scanner checks packages, container images, and filesystems for known vulnerabilities, verifies package origin, and creates software inventories. CVEs are public records of security vulnerabilities.

Use it to check packages, scan containers and filesystems, look up CVEs, verify Sigstore provenance, map impact, and generate SBOMs.

It helps identify vulnerable dependencies and images, and shows where a risky component may affect your systems.

agent-bom-scan — Skill for Codex by LeoYeAI

About the project

OpenClaw Master Skills is a curated, regularly updated collection of skills that extends an AI personal assistant platform with capabilities such as research, browser automation, presentation creation, and prompt work. It is intended for people using OpenClaw or MyClaw.ai to give their agents additional tasks and workflows. The catalogue contains many skills and agents from this collection.

LeoYeAI/openclaw-master-skills · 2,141 stars · on GitHub · myclaw.ai

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add LeoYeAI/openclaw-master-skills --skill scan

Clone the repo

git clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skills

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/scan/github.svg)](https://agentmods.dev/skills/leoyeai/openclaw-master-skills/scan)

Your own site

<a href="https://agentmods.dev/skills/leoyeai/openclaw-master-skills/scan"><img src="https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/scan/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/leoyeai/openclaw-master-skills/scan"><img src="https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/scan.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 81 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,054 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 8 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

high Agent Snooping · line 50
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.

Fix: Remove all code or instructions that access agent configuration directories (.claude/, .codex/, .gemini/). If configuration values are needed, pass them explicitly as parameters or environment variabl
high Agent Snooping · line 62
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.

Fix: Remove all code or instructions that access agent configuration directories (.claude/, .codex/, .gemini/). If configuration values are needed, pass them explicitly as parameters or environment variabl
high Agent Snooping · line 64
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.

Fix: Remove all code or instructions that access agent configuration directories (.claude/, .codex/, .gemini/). If configuration values are needed, pass them explicitly as parameters or environment variabl
high Agent Snooping · line 68
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.

Fix: Remove all code or instructions that access agent configuration directories (.claude/, .codex/, .gemini/). If configuration values are needed, pass them explicitly as parameters or environment variabl
medium Data Exfiltration · line 100
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 106
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 109
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Privilege Escalation · line 193
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00081	$0.02054
Opus 5	$0.00041	$0.01027
Sonnet 5	$0.00016	$0.00411
Haiku 4.5	$0.00008	$0.00205

Measured 9d ago against content hash b6c7ee784a72, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

agent-bom-scan scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directorieslowAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

- "~/.claude/settings.json"

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

skills/agent-bom/scan/SKILL.md · 221 lines

How it starts

The opening of the file, as written. The whole thing — 221 lines — stays where its author put it; the contents beside it link to each section on GitHub.

agent-bom-scan — AI Supply Chain Vulnerability Scanner

Checks packages for CVEs, scans container images natively, verifies package provenance via Sigstore, scans filesystems, and generates SBOMs.

Install

pipx install agent-bom
agent-bom agents             # discover agents and scan dependencies
agent-bom check langchain==0.1.0  # check a specific package with version
agent-bom image nginx:1.25   # scan container image (native)
agent-bom fs .               # scan filesystem packages
agent-bom sbom .             # generate SBOM
agent-bom verify agent-bom   # verify Sigstore provenance
agent-bom where              # show all discovery paths

As an MCP Server

{
  "mcpServers": {
    "agent-bom": {
      "command": "uvx",
      "args": ["agent-bom", "mcp"]
    }
  }
}

When to Use

"check package" / "is this package safe"
"scan image" / "scan container"
"verify" / "check provenance"
"is this safe" / "CVE lookup"
"scan dependencies"
"blast radius"
"generate SBOM"

Tools (8)

Tool	Description
`check`	Check a package for CVEs (OSV, NVD, EPSS, KEV)
`scan`	Full discovery + vulnerability scan pipeline
`blast_radius`	Map CVE impact chain across agents, servers, credentials
`remediate`	Prioritized remediation plan for vulnerabilities
`verify`	Package integrity + SLSA provenance check
`diff`	Compare two scan reports (new/resolved/persistent)
`where`	Show MCP client config discovery paths
`inventory`	List discovered agents, servers, packages

Examples

# Check a package before installing
check(package="langchain", version="0.1.0", ecosystem="pypi")

# Map blast radius of a CVE
blast_radius(cve_id="CVE-2024-21538")

# Full scan
scan()

# Verify package provenance
verify(package="agent-bom")

Guardrails

Show CVEs even when NVD analysis is pending or severity is unknown — a CVE ID is still a real finding.
Treat UNKNOWN severity as unresolved, not benign — it means data is not yet available.
Do not modify any files, install packages, or change system configuration.
Only public package names and CVE IDs leave the machine for vulnerability database lookups.
Ask before scanning paths outside the user's home directory.

Read the full file on GitHub · 221 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

9d ago First seen · 221 lines · 81 tokens per session scan A b6c7ee784a72

Subscribe to this mod's changes

agent-bom-scan is a skill published in the GitHub repository LeoYeAI/openclaw-master-skills (2,141 stars, last pushed 1mo ago), licensed MIT. It adds 81 tokens to every session and 2,054 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Containers DevOps and cloud Security agentskills ai-agent curated myclaw openclaw skill-collection

manage-mounts

Configure which host directories agent containers can access. View, add, or remove mount allowlist entries. Triggers on "mounts", "mount allowlist", "agent access to directories", "container mounts".

nanocoai/nanoclaw · 47 tokens

redteam-container-detail-pack

Domain routing and boundary guidance for authorized container and orchestration security testing, including Docker escape, Kubernetes privilege escalation, image vulnerabilities, and service mesh bypasses. Use when a task belongs to the container testing domain and needs scope, evidence, pivot, or exit criteria.

Netw0rkNoob/VulnClaw · 59 tokens

helm

Helm chart expert for Kubernetes package management, templating, and dependency management.

RightNow-AI/openfang · 17 tokens

docker

Docker expert for containers, Compose, Dockerfiles, and debugging.

RightNow-AI/openfang · 14 tokens

kubernetes

Kubernetes operations expert for kubectl, pods, deployments, and debugging.

RightNow-AI/openfang · 17 tokens

comfyui-skill-openclaw

Run registered ComfyUI workflows through the fast comfyui-skill CLI, and use the official local Comfy MCP for live template, node, model, validation, and orchestration capabilities. Use this Skill when: (1) The user requests to "generate an image", "draw a picture", or "execute a ComfyUI workflow". (2) The user has…

HuangYuChuh/ComfyUI_Skills_OpenClaw · 125 tokens

agent-bom-scan

Getting it into your agent

Wrote this? Show the measurements

What it costs to keep this loaded

Grade A, and why

Reads agent configuration directorieslowAgent snooping

How it starts

agent-bom-scan — AI Supply Chain Vulnerability Scanner

Install

As an MCP Server

When to Use

Tools (8)

Examples

Guardrails

What this file has done since we first saw it

Other skills, from other repositories

manage-mounts

redteam-container-detail-pack

helm

docker

kubernetes

comfyui-skill-openclaw