agent-bom
Open security scanner for AI supply chain: agents, MCP, containers, cloud, GPU, and runtime with blast-radius analysis.
- Scan MCP server dependencies for known vulnerabilities
- Generate software bill of materials for AI agent stacks
- Map blast radius of compromised components across deployments
AI supply chain attacks are emerging faster than teams can audit — this scanner maps the full blast radius of agent dependencies including MCP servers, containers, and GPU runtimes, filling a critical gap in enterprise AI security posture.
Security teams and CISOs responsible for AI deployments who need to inventory and scan the full dependency tree of agent-based systems.
https://github.com/msaad00/agent-bom
By msaad00
How to Get It
claude plugins install msaad00/agent-bom
Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.
Trust Signals Automated Scan
Community Pulse Active
Discussed on Hacker News, Reddit
- Megathread: FBI Director Comey fired — Reddit · 55998 pts
- Megathread: Donald Trump Jr. Releases Correspondence from Russian Lawyer — Reddit · 44281 pts
- US Airforce supporting Max Verstappen during Vietnam GP with ‘Agent Orange’. — Reddit · 27964 pts
21 mentions across 2 sources
Reviewer notes
Automated Scan review. These are observations, not a security certification.
Auto-evaluated from staging triage
How to evaluate tools before deploying →
Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.