agent-bom ingest

This Skill addresses the challenges of multi-source cloud resource inventory validation and compliance auditing. In real-world operations, enterprises often export standardized JSON inventories from sources like AWS, Azure, GCP, Snowflake, CMDB, or endpoint collectors, but lack unified validation and localized analysis methods. This tool ensures these inventories conform to predefined schemas and automatically generates visual charts, policy compliance reports, and traceability records, preventing security risks caused by inventory format errors or missing information.

Usage is straightforward: simply prepare a compliant JSON file, then run agent-bom mcp validate inventory.json for validation, followed by agent-bom scan --inventory inventory.json --format json --output findings.json to complete the local scan. Afterward, you can use natural language instructions to obtain vulnerability analysis, dependency graphs, or export audit reports in formats like SARIF, HTML, or Markdown. The entire process requires no cloud platform credentials, with all data processed locally.

It is ideal for operations teams and security analysts who need to regularly inventory cloud resources and conduct compliance audits—especially organizations that already have a CMDB or automated collection pipeline but lack offline validation and independent auditing capabilities. The tool also helps auditors independently verify inventories provided by third parties without exposing cloud credentials.

We recommend using this tool uniformly during each cloud resource change or quarterly audit. Note that it primarily relies on Python 3.11+ and agent-bom 0.84.4+, and input inventories must strictly adhere to the built-in inventory.schema.json contract. If inventories come from non-standard collectors, format conversion may be required first.