agent-bom ingest
Validates and imports cloud resource inventory JSON, generating local scan results.
Install & Use
Copy this prompt and send it to your AI assistant (Claude / Cursor / TRAE / Codex / WorkBuddy etc.) to auto-install:
Help me install this AI Skill: agent-bom ingest. It is used for: Validates and imports cloud resource inventory JSON, generating local scan results. Full Skill content: https://321skill.com/skills/agent-bom-ingest-x-6/raw/index.md Read that page and install it.
The prompt includes a link to the full Skill content. You can also view the full content.
This Skill addresses the inefficiency and error-proneness of manually validating cloud resource inventory JSON. In real-world development, operations teams need to export standardized inventories from AWS, Azure, GCP, Snowflake, CMDB, or endpoint collectors. However, inconsistencies in JSON format, missing fields, or the inclusion of sensitive information pose security risks when using the data directly.
Usage is straightforward: simply prepare a compliant inventory.json file, run agent-bom mcp validate inventory.json for schema validation, then execute a local scan via agent-bom scan --inventory inventory.json --format json --output findings.json. You can then export results in formats such as SARIF, HTML, Markdown, or CycloneDX as needed for CI gating, auditing, or visual analysis.
It is particularly suitable for operations engineers and data analysts who need unified management of multi-cloud asset inventories. Teams with mature CMDB or endpoint collection systems but lacking local validation and cross-platform scanning capabilities can securely obtain compliance reports without requiring credentials.
We recommend integrating this tool into CI/CD pipelines as an automated pre-deployment check step. Note that it requires the input JSON to strictly adhere to the packaged inventory.schema.json contract, and it needs a Python 3.11+ and agent-bom 0.84.4+ environment. It is not suitable for direct integration with real-time cloud APIs.
Key Features
Unlike the native agent-bom which scans cloud environments, this Skill focuses on importing pre-generated inventory JSON. It requires no cloud credentials and enforces schema validation before processing, preventing distorted scan results due to data format issues.
Limitations
Requires Python 3.11+ and agent-bom 0.84.4+. The input JSON must strictly comply with the packaged `inventory.schema.json`; otherwise, the validation phase will fail.
FAQ
How do I verify if my JSON is compliant?
Run `agent-bom mcp validate inventory.json`. If the output shows no errors, the JSON conforms to the schema.
What result formats can be exported?
It supports JSON, SARIF, HTML, Markdown, and formats like CycloneDX/SPDX. You can choose based on audit or CI requirements.
Installation guide for AI assistants
If your AI coding assistant (Claude Code, Cursor, TRAE etc.) can see this page, send it this message to auto-install:
Visit https://321skill.com/skills/agent-bom-ingest-x-6/raw/index.md to read the original Skill definition (Markdown format) for agent-bom ingest, and install it according to the instructions.
Raw Markdown URL for AI: /skills/agent-bom-ingest-x-6/raw/index.md