agent-bom ingest
Validate and import cloud platform asset inventory JSON
Install & Use
Copy this prompt and send it to your AI assistant (Claude / Cursor / TRAE / Codex / WorkBuddy etc.) to auto-install:
Help me install this AI Skill: agent-bom ingest. It is used for: Validate and import cloud platform asset inventory JSON Full Skill content: https://321skill.com/skills/agent-bom-ingest-x-2/raw/index.md Read that page and install it.
The prompt includes a link to the full Skill content. You can also view the full content.
This Skill addresses the challenge of unifying the validation and local analysis of enterprise cloud asset inventory data. In real-world operations, after teams export asset inventories in JSON format from AWS, Azure, GCP, Snowflake, or their CMDB, they often need to manually check format compliance before importing the data into local tools for security scanning or policy auditing—a process that is both cumbersome and error-prone.
Usage is straightforward: simply prepare a JSON file that complies with the agent-bom specification and invoke this Skill via an AI command. It will automatically validate the JSON structure using a built-in schema file, ensuring fields are complete and conform to the contract. Upon successful validation, you can execute local scans to generate discovery reports and dependency graphs, with support for exporting to formats such as JSON, SARIF, HTML, Markdown, or CycloneDX for consumption by different downstream systems.
It is particularly well-suited for operations teams and security auditors who need centralized management of multi-cloud asset inventories. This is especially valuable for teams that already have a CMDB or cloud asset collection pipeline but lack local analysis capabilities and are reluctant to share cloud credentials directly with third-party tools. Using this Skill, operations personnel can perform local compliance checks and policy audits on asset inventories without exposing any cloud credentials.
It is recommended to use this tool uniformly for validation and scanning each time a new asset inventory is pulled from a cloud platform. Note that it primarily relies on a local Python environment (3.11+) and the agent-bom core library (0.84.4+). The input JSON must strictly adhere to the field structure defined in packaged inventory.schema.json; otherwise, errors will occur.
Key Features
Unlike traditional CMDB import tools (such as ServiceNow's CSV bulk import), agent-bom-ingest enforces JSON validation against a built-in schema before import to ensure data contract consistency. It also supports local scanning to generate graph relationships and vulnerability reports without needing to upload the inventory to any third-party cloud platform.
Limitations
Requires Python 3.11+ and agent-bom 0.84.4+. The input JSON must strictly follow the field structure defined in `packaged inventory.schema.json` and does not support directly reading binary or non-JSON formatted asset inventories.
FAQ
How do I prepare a valid agent-bom inventory JSON file?
You need to generate a JSON file containing required fields such as `discovery_provenance` and `permissions_used`, as defined in the `inventory.schema.json` from the official agent-bom documentation. You can start by manually creating a minimal example and then use the Skill's validate command to check if it passes.
Does this Skill require cloud platform credentials?
No. It only processes JSON files already generated by operator-push or endpoint collectors and does not actively connect to any cloud platform APIs. All operations are performed locally, so cloud credentials are never exposed.
Installation guide for AI assistants
If your AI coding assistant (Claude Code, Cursor, TRAE etc.) can see this page, send it this message to auto-install:
Visit https://321skill.com/skills/agent-bom-ingest-x-2/raw/index.md to read the original Skill definition (Markdown format) for agent-bom ingest, and install it according to the instructions.
Raw Markdown URL for AI: /skills/agent-bom-ingest-x-2/raw/index.md