Menu

Individual skill

ai-bom

0upvotes

Generates AI-BOM, MCP inventory, AI skill inventory, and AI authorship provenance documents with cdxgen, cataloging models, inference services, Hugging Face purls, MCP servers and their tools/prompts/resources, agent instruction files, and cdx:ai:codegen provenance signals, then audits them with AI-focused rule packs. Use when asked to inventory AI or ML usage, catalog MCP servers, audit agent instruction or skill files, assess AI supply-chain risk, or detect AI-generated code authorship.

agent-plugin/skills/ai-bom/SKILL.md

Read pinned source

Source commit 5a7d22b0a3601531f034bb0d9e4d44c9ad0655cf

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
Yes
Repository scan complete
No
Skill scan complete
No
Observed behavior
Network or broad shell
Last checked
Nov 10, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
1,112
Repository last updated
Nov 10, 2026
License
Apache-2.0

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

# AI-BOM, MCP inventory, and AI provenance

Four related but distinct concerns. Pick the right one before reaching for
flags — conflating them produces a document that answers the wrong question.

| Question                                              | Project type                          |
| ----------------------------------------------------- | ------------------------------------- |
| What models and inference services does this use?     | `ai` / `aibom` / `ai-bom`             |
| What MCP servers, tools, and configs does this ship?  | `mcp`                                 |
| What agent instruction and skill files does it ship?  | `ai-skill` / `skill` / `skills`       |
| Was this code written with AI assistance?             | `ai-provenance` / `ai-authorship` / `aicode` / `ai-codegen` |

Read [reference/safety.md](../../reference/safety.md) first. The
review-before-sharing rule is especially relevant here: AI and MCP inventory is
Back to top