io.github.koda-ai-studio/agent-bomai

agent-bom

Verified · today

Scan AI/MCP dependencies, descriptor injection, risky tool inputs and authentication configuration.

Install

claude mcp add agent-bom -- uvx agent-bom

Requires: NVD_API_KEY

Our take

Scans AI and MCP dependencies for descriptor injection, risky tool inputs, and authentication misconfiguration. It is aimed at developers and security reviewers, but its modest adoption suggests an early-stage tool whose findings should be validated rather than treated as definitive.

reviewed by hand · 2026-10-23

Something wrong or dead here? Report it

Verification record

last verified
today
github stars
35
last commit
today
archived
no
license
Apache-2.0
in registry since
2026-10-22

github.com/koda-ai-studio/agent-bom

More in ai

browse all →
reaai

REA

Verified · 6 days ago

Reverse engineer anything from your terminal or agent with one CLI and MCP server.

hand-reviewed291k stars232k dl/wkchecked 6 days ago

claude-flowai

claude-flow

Verified · 35 days ago

AI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.

hand-reviewed73k stars19k dl/wkchecked 35 days ago

tldrawai

tldraw

Verified · 36 days ago

Draw and visually collaborate with your agents on tldraw's canvas.

hand-reviewed50k starschecked 36 days ago

codebase-memory-mcpai

Codebase Memory

Verified · 26 days ago

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

hand-reviewed45k stars12k dl/wkchecked 26 days ago

openmetadata-mcpai

OpenMetadata

Verified · 18 days ago

Official OpenMetadata MCP: 21 read and write tools for search, lineage, data quality, governance.

hand-reviewed15k starschecked 18 days ago

mobilerunai

mobilerun

Verified · 38 days ago

Control real Android and iOS devices with LLM agents — tap, swipe, type, automate flows.

hand-reviewed9.4k starschecked 38 days ago