1. Conduid
  2. Security
  3. Agent Sbom
MCP server · Security

Agent Sbom

by · github.com/nripankadas07/agent-sbom

Capability-aware SBOM and SARIF scanner for agent skills, MCP manifests, prompts, and scripts.

Unclaimed agent-securitymcppythonsarifsbomsoftware-supply-chainstatic-analysis
InstallView source
34Low

Scored a month ago · breakdown

About Agent Sbom

Agent Sbom is an MCP server published by nripankadas07 in the Security category: capability-aware SBOM and SARIF scanner for agent skills, MCP manifests, prompts, and scripts.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/nripankadas07/agent-sbom

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Agent Sbom

Powered by Claude · Grounded in docs

I know everything about Agent Sbom. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.1.1v0.1.1 — adversarial hardening · 16 Aug 2026What changed Pinned-root, no-follow scanning; canonical artifact validation; transactional report publication. This release incorporates independent adversarial review, strict input and artifact boundaries, package hygiene, deterministic…
v0.1.0v0.1.0 — Initial public alpha · 16 Aug 2026Initial public alpha/reference release. Offline, no-key deterministic proof path Versioned machine-readable artifacts plus reviewable Markdown and self-contained HTML CI, packaging, security guidance, limitations, governance, and…
Questions

About Agent Sbom

How do I install Agent Sbom?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Agent Sbom safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Agent Sbom still maintained?

Yes — the latest release is v0.1.1 (16 Aug 2026), and the last commit was 2 months ago. The repository has 0 stars.