Why this fit
Teams evaluating AI models, assistants and generative workflows, particularly security scanning and AI agents that connect over MCP — source available on GitHub.
AI / Catalogue record
Unknown
Catalogue record
github.com
agent-bom
🐍 🏠 ☁️ 🍎 🪟 🐧 - AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/...
Checked Oct 27, 2026Evidence completeness: evidenceREADME refreshed Oct 16, 2026
Field notes
Useful context before you commit.
🐍 🏠 ☁️ 🍎 🪟 🐧 - AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.
Best for
Teams evaluating AI models, assistants and generative workflows, particularly security scanning and AI agents that connect over MCP — source available on GitHub.
Known limitations
Workflows that require fully deterministic, auditable outputs with no human review step.
Verify current plan terms with the provider.
Evidence summary
Known limitations
Workflows that require fully deterministic, auditable outputs with no human review step.
Catalogue confidence
Catalogue data checked Oct 27, 2026.
GitHub-backed record with source-attributed context.
Repository context
Project README
GitHub / msaad00/agent-bom
Learn how it works
A guided tour of this tool
A short, animated walkthrough of the architecture, features and full README.
Public record assistant
Ask about agent-bom
Evidence-bound answers from this catalogue record. No workspace data is used.
Sign in to ask Oryxen AI about this record
The database-first brief above stays free for everyone.
Record provenance
What this record is based on.
Oryxen distinguishes catalogue metadata from repository context. These signals describe the directory record and its sources; they do not guarantee the current availability, security, or suitability of an external product.
- Listing status
- Listed in active catalogue
- Freshness
- Catalogue updated Oct 27, 2026
- Source
- GitHub-backed record
- Repository context
- Repository activity not yet retrieved
Key links
Keep researching this tool
Community signal
Practical notes from users.
Feedback is public only after moderation. It is distinct from README-derived project context.
Add your signal
Used this tool?
Sign in to submit feedback for moderation.
Don't miss — compare before you commit
Top 4 alternatives to agent-bom you should see.
Same category · honest pricing & fit — click any card to compare.