← All skills

scan

85 / 100 · Low risk

Fine to try.

By koda-ai-studio/agent-bom (GitHub) · security · 37 stars · scanned at commit dcd0f62

Scan this machine's AI agents and MCP servers, a container image, an SBOM or a repository with agent-bom for CVEs, supply-chain risk and exposed credentials. Use when the user asks for an agent-bom scan, an MCP or agent security check, or an AI supply-chain audit. It does not read chat or session history, and past conversations are out of scope, so do not open session files on its behalf.

Works with any agent that supports SKILL.md skills.

What this skill can do

Other copies in this repository

koda-ai-studio/agent-bom has 2 more folders with a skill named scan. This page shows the lowest-scoring copy.

• integrations/claude-code/skills/scan 97/100 · Low risk
• integrations/claude-directory/skills/scan 97/100 · Low risk

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'scan' ] || [ -L ~/.agents/skills/'scan' ]; then echo 'A skill folder named scan already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/koda-ai-studio/agent-bom' "$d" && git -C "$d" checkout --quiet 'dcd0f62fa69f34541ab70d52ab7acd1a10847a6d' -- 'integrations/codex/skills/scan' && mkdir -p ~/.agents/skills && cp -R "$d"/'integrations/codex/skills/scan' ~/.agents/skills/'scan' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'scan' ~/.claude/skills/'scan' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for koda-ai-studio/agent-bom shows the score of its lowest-scoring skill.

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/koda-ai-studio/agent-bom.svg)](https://zalavijaysinh.github.io/skilltrust/repos/koda-ai-studio/agent-bom/)

Score history