Agent Bom Scan

agent-bom-scan — AI Supply Chain Vulnerability Scanner

Discovers MCP clients and servers across 20 AI tools, checks packages for CVEs, maps blast radius, and generates remediation plans.

Install

pipx install agent-bom
agent-bom scan              # auto-discover + scan
agent-bom check langchain   # check a specific package
agent-bom where             # show all discovery paths

As an MCP Server

{
  "mcpServers": {
    "agent-bom": {
      "command": "uvx",
      "args": ["agent-bom", "mcp"]
    }
  }
}

Tools (8)

Example Workflows

# Check a package before installing
check(package="@modelcontextprotocol/server-filesystem", ecosystem="npm")

# Map blast radius of a CVE
blast_radius(cve_id="CVE-2024-21538")

# Full scan
scan()

Privacy & Data Handling

This skill installs agent-bom from PyPI. The redaction behavior described here is implemented in the installed package — verify before running with sensitive data:

# 1. Verify package integrity (Sigstore)
agent-bom verify agent-bom

# 2. Review the redaction code directly
# security.py L159: sanitize_env_vars() — replaces env values with ***REDACTED***
# https://github.com/msaad00/agent-bom/blob/main/src/agent_bom/security.py#L159

# 3. Review config parsing
# https://github.com/msaad00/agent-bom/blob/main/src/agent_bom/discovery/__init__.py

Discovery reads local MCP client config files. Only server names, commands, args, and URLs are extracted. Env var values are replaced with ***REDACTED*** by sanitize_env_vars() in the installed code. Only public package names and CVE IDs are sent to vulnerability databases.

Verification

• Source: github.com/msaad00/agent-bom (Apache-2.0)
• Sigstore signed: `agent-bom verify agent-bom@0.62.0
• 3,400+ tests with CodeQL + OpenSSF Scorecard
• No telemetry: Zero tracking, zero analytics