Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/msaad00/agent-bom/monitornpx skills add msaad00/agent-bom --skill monitorgit clone --depth 1 https://github.com/msaad00/agent-bomWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00048 | $0.00986 |
| Opus 5 | $0.00024 | $0.00493 |
| Sonnet 5 | $0.00010 | $0.00197 |
| Haiku 4.5 | $0.00005 | $0.00099 |
Grade A, and why
agent-bom-monitor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
agent-bom-monitor — Agent Fleet Monitor
Monitor agent fleet health, track trust scores, and manage agent lifecycle states across your AI infrastructure. Start a local dashboard server for continuous monitoring.
Install
pipx install agent-bom
agent-bom fleet sync # sync fleet state with latest scan
agent-bom fleet list # list all agents and trust scores
agent-bom serve # start local monitoring dashboard
When to Use
- "fleet" / "agent fleet"
- "watch agents" / "monitor agents"
- "runtime status"
- "trust scores"
- "fleet sync"
- "agent lifecycle"
- "serve dashboard" / "start dashboard"
Commands
# Sync fleet state with latest scan
agent-bom fleet sync
# List all agents with trust scores
agent-bom fleet list
# Start local monitoring dashboard
agent-bom serve
Examples
# Sync fleet
fleet_sync()
# List agents and trust scores
fleet_list()
# Start dashboard server
serve()
Example fleet list output:
Agent Fleet — 7 agents tracked
filesystem trust: 92 status: healthy last-scan: 2m ago
brave-search trust: 88 status: healthy last-scan: 2m ago
github trust: 95 status: healthy last-scan: 2m ago
slack trust: 71 status: warning last-scan: 2m ago [2 CVEs]
postgres trust: 84 status: healthy last-scan: 2m ago
linear trust: 90 status: healthy last-scan: 2m ago
notion trust: 67 status: at-risk last-scan: 2m ago [CRITICAL]
Guardrails
- Fleet monitoring is read-only — no agents are modified.
- The dashboard server runs on localhost only — no external exposure.
- Confirm with the user before starting
agent-bom serve— it binds a local port. - Trust scores are derived from local scan data; they do not contact external services.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 122 lines · 48 tokens per session scan A 05cf5a46fcb3
agent-bom-monitor is a skill published in the GitHub repository msaad00/agent-bom (31 stars, last pushed 2d ago), licensed Apache-2.0. It adds 48 tokens to every session and 986 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
skill-inspector
Review AI agent skills before installation using NVIDIA SkillSpector and source-aware semantic review. Use when asked whether a skill or downloaded skill folder is safe, trustworthy, installable, over-permissioned, or malicious.
underdeclared-agent
A helpful assistant agent.
toolhive-cli-user
Guide for using ToolHive CLI (thv) to run and manage MCP servers and skills. Use when running, listing, stopping, building, or configuring MCP servers locally. Covers server lifecycle, registry browsing, secrets management, client registration, groups, container builds, exports, permissions, network isolation…
add-rule
Captures a team convention or best practice and adds it to the appropriate .claude/rules/ or .claude/agents/ file.
integrate-arcjet-guard-claude-agent-sdk
Integrate Arcjet security into a Claude Agent SDK agent using @arcjet/guard — wrap tool() handlers, screen inbound prompts with UserPromptSubmit, and deny unwrapped built-in/MCP tools with PreToolUse. Use when asked to add Arcjet to a Claude Agent SDK or Claude Code agent, rate limit its tools, screen inbound…
integrate-arcjet-guard-eve
Integrate Arcjet security into a Vercel Eve agent using @arcjet/guard — add guard gates to tools and connections, screen inbound messages, and record agent lifecycle events correlated to the session. Use when asked to add Arcjet to an Eve agent, rate limit its tools, guard connection access, or screen inbound messages.