---
slug: agent-bom-vulnerability-intel
name: agent-bom-vulnerability-intel
version: "0.96.3"
displayName: Agent Bom Vulnerabil
summary: "使用agent-bom检查包、SBOM、清单与Agent依赖暴露,对接OSV/GitHub漏洞库"
  against OSV, GitHu...
license: MIT-0
description: |-
  Use agent-bom to check package, SBOM, inventory, and agent dependency
  exposure against OSV, GitHu。Use when 需要AI模型调用、智能对话、Agent编排、LLM应用时使用。不适用于需要100%确定性的关键决策。
tags:
- Security
tools:
  - - read
- exec
pricing_tier: "L3"
pricing_model: "per_use"
suggested_price: 29.9
---


# agent-bom vulnerability intel

Use this skill to answer vulnerability-intelligence questions through
agent-bom's existing scanners and canonical evidence model. Do not create
one-off OSV, GHSA, NVD, EPSS, or KEV clients in the agent session; route through
agent-bom so advisory provenance, aliases, severity gates, cache behavior,
redaction, and output schemas stay consistent.

## Modes

Start with the smallest mode that answers the user:

| Mode | Use When | Data Boundary |
| --- | --- | --- |
| `explain-only` | User wants to know what would be queried | No advisory calls |
| `check-package` | User names one package/version/ecosystem | Only that package identifier is queried |
| `scan-local` | User wants findings from local agents or a local inventory file | Local parse first; advisory calls use package identifiers only |
| `offline-review` | Private package names cannot leave the environment | Use local/cache-approved data only; disclose reduced coverage |
| `export` | User wants PR gate, SARIF, JSON, or audit evidence | Write only to an operator-selected path |

## Guardrails

* Ask before scanning a broad filesystem path or local agent configs.
* Do not paste or reveal `NVD_API_KEY`, `GITHUB_TOKEN`, package-registry
  credentials, cloud credentials, or env values.
* Do not send full source files, lockfiles, config contents, secrets, or scan
  reports to advisory providers. agent-bom extracts package identifiers first.
* Treat unknown or unresolvable versions as coverage gaps, not clean results.
* Preserve advisory provenance. Do not collapse OSV, GHSA, NVD, EPSS, and KEV
  into a single unlabelled severity.
* Do not modify dependencies or install fixes unless the user explicitly asks
  for a remediation workflow.

## Workflows

### Explain the Boundary

When the user asks "what leaves my environment?", answer before running:

```text
This lookup sends package identifiers (name, version, ecosystem/PURL) and CVE
IDs to public advisory databases. It does not send source code, raw configs,
secrets, env values, credentials, or full scan reports. Use offline-review if
private package names are sensitive.
```

### Check One Package

```bash
agent-bom check flask==2.0.0 --ecosystem pypi
```

Use this for quick triage and fix-version checks. If the package name belongs
to a private registry or internal project, use `explain-only` first and let the
operator decide whether the identifier may be queried externally.

### Scan a Canonical Inventory

```bash
agent-bom scan --inventory inventory.json --format json --output findings.json
```

Use this after an operator-pull adapter or discovery skill emits canonical
inventory. The inventory can stop at the file boundary; scanning is an explicit
operator handoff.

### Export for a PR Gate

```bash
agent-bom scan --inventory inventory.json --format sarif --output agent-bom.sarif
```

Use SARIF only when the user wants GitHub code-scanning or AppSec PR-gate
evidence. Keep JSON for local analysis and audit trails.

### Offline Review

If external advisory calls are not allowed, run with the project's offline or
cache-approved mode and say clearly that coverage depends on the locally
available vulnerability database. Do not call a clean offline result equivalent
to a fresh OSV/GHSA/NVD lookup.

## Output Rules

* Show CVE/GHSA/PYSEC aliases together when available.
* Include severity source, fix version, EPSS, KEV status, CWE, and advisory
  source chain when present.
* Separate "no vulnerabilities found" from "not enough data to evaluate."
* Keep raw credentials and credential-bearing URLs out of output, logs, prompts,
  SARIF locations, and exported reports.

## 依赖说明

### 运行环境
- **Agent平台**: 支持SKILL.md的任意AI Agent(Claude Code / Cursor / Codex / Gemini CLI等)
- **操作系统**: Windows / macOS / Linux

### 依赖说明
| 依赖项 | 类型 | 是否必需 | 获取方式 |
|:-------|:-----|:---------|:---------|
| LLM API | API | 必需 | 由Agent内置LLM提供 |

### API Key 配置
- 本Skill基于Markdown指令,无需额外API Key(除内容中明确标注的外部API)

### 可用性分类
- **分类**: MD+EXEC(纯Markdown指令,部分功能需要exec命令行执行能力)
- **说明**: 基于Markdown的AI Skill,通过自然语言指令驱动Agent执行任务

## 核心能力

- Use agent-bom to check package, SBOM, inventory, and agent dependency
  exposure against OSV, GitHu
- 触发关键词: inventory, sbom, check, package, bom, agent, vulnerability, agent-bom

## 适用场景

| 场景 | 输入 | 输出 |
|------|------|------|
| 基础使用 | 用户请求 | 处理结果 |

**不适用于**：需要人工判断的复杂决策场景

## 使用流程

1. 确认运行环境满足依赖说明中的要求
2. 根据适用场景选择合适的使用方式
3. 执行操作并检查输出结果
4. 如遇错误，参考错误处理章节

## 示例

### 示例1：基础用法

```
输入: 用户请求
处理: 根据使用流程执行
输出: 处理结果
```

## 错误处理

| 错误场景 | 原因 | 处理方式 |
|---------|------|---------|
| 配置错误 | 参数缺失或格式错误 | 检查依赖说明中的配置要求 |
| 运行时错误 | 运行环境不满足 | 确认运行环境符合依赖说明 |
| 网络错误 | 连接超时或不可达 | 检查网络连接后重试，参考国内替代方案 |

## 常见问题

### Q1: 如何开始使用Agent Bom Vulnerabil？
A: 请先阅读使用流程章节，确认环境满足依赖说明中的要求。

### Q2: 遇到错误怎么办？
A: 请参考错误处理章节，按照表格中的处理方式操作。

### Q3: Agent Bom Vulnerabil有什么限制？
A: 请参考已知限制章节了解具体限制。

## 已知限制

- 需要LLM支持，无LLM环境无法使用
- 复杂场景可能需要人工辅助判断
- 性能取决于底层模型能力