Bumblebee · mycelos-ai bundle Run Bumblebee supply-chain inventory and exposure scans on the local machine. Use this skill whenever the user wants to check developer endpoints for compromised npm/PyPI/Go/RubyGems/Composer packages, audit installed editor or browser extensions, inspect MCP host configs, or perform supply-chain incident response on macOS/Linux. Trigger on phrases like "Bumblebee scan", "supply-chain check", "compromised package", "exposure scan", "baseline inventory", "project scan", "deep scan", "scan my machine for vulnerable packages", "check for malicious extensions", or any request involving the bumblebee CLI. Also use when the user names an advisory and wants to know if their machine is affected. The skill handles requirements checks (Go, Bumblebee), installs Bumblebee via `go install` if missing, runs the requested profile, and produces both raw NDJSON and a human-readable Markdown report.
