agent-bom-ingest@0.110.0

VERIFIED

Publisher claims: "Validate and ingest operator-pushed agent-bom inventory JSON from AWS, Azure, GCP, Snowflake, CMDB, or endpoint collectors. Use when a user has canonical inventory JSON and wants local findings, graph, policy, provenance, or auditor-ready exports without giving agent-bom direct cloud credentials." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher msaad00 · joined 1 days agoInstalls 4,655Last detonated 29 h ago

$npx skills add agent-bom-ingest

Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

File type combined with upload actionSKILL.md:94 · File type combined with upload action — agent may exfiltrate local data files

AST07

No other findings across 168 lines in 2 files.