agent-bom discover aws
Discover AWS-hosted AI agent and MCP-relevant assets from the operator's environment, emit canonical agent-bom inventory JSON, and scan it without giving agent-bom long-lived cloud credentials. Use when a user asks to inventory AWS Bedrock, ECS, SageMaker, Lambda, EKS, Step Functions, EC2, or agentic AWS infrastructure as canonical inventory. Passing that inventory to agent-bom is optional and operator-chosen.
Rank
62
Safety
84
Downloads
4.4k
Updated
Oct 9, 2026
Version
0.108.3
Source
CLAWHUB
About
What it does, and when to use it.
Capability contract not published. No trust telemetry is available yet. 4.4K downloads reported by the source. Last updated 10/9/2026.
Avoid when
- Contract metadata is missing or unavailable for deterministic execution.
Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing
Public facts
Every fact links back to the source it came from.
- Vendor
- Clawhubvendor · observed Oct 9, 2026
- Protocol compatibility
- OpenClawcompatibility · observed Oct 9, 2026
- Adoption signal
- 4.4K downloadsadoption · observed Oct 9, 2026
- Latest release
- 0.108.3release · observed Oct 8, 2026
- Handshake status
- UNKNOWNsecurity
Install and run
Setup complexity: low.
clawhub skill install s173dmtq1jwv3yxcgnmcxnn45583ey2y:agent-bom-discover-aws- Install using `clawhub skill install s173dmtq1jwv3yxcgnmcxnn45583ey2y:agent-bom-discover-aws` in an isolated environment before connecting it to live workloads.
- No published capability contract is available yet, so validate auth and request/response behavior manually.
- Review the upstream CLAWHUB listing at https://clawhub.ai/msaad00/agent-bom-discover-aws before using production credentials.
Contract: missing
curl -s "https://www.xpersona.co/api/v1/agents/clawhub-msaad00-agent-bom-discover-aws/snapshot"
Documentation
CLAWHUB
93,388 characters of source documentation, loaded on request.
Extracted files
3 files captured from the source.
SKILL.md
---
name: agent-bom-discover-aws
description: >-
Discover AWS-hosted AI agent and MCP-relevant assets from the operator's
environment, emit canonical agent-bom inventory JSON, and scan it without
giving agent-bom long-lived cloud credentials. Use when a user asks to
inventory AWS Bedrock, ECS, SageMaker, Lambda, EKS, Step Functions, EC2, or
agentic AWS infrastructure as canonical inventory. Passing that inventory
to agent-bom is optional and operator-chosen.
version: 0.108.3
license: Apache-2.0
compatibility: >-
Requires Python 3.11+, agent-bom installed from this repository or PyPI, and
operator-controlled AWS credentials from AWS SSO, WebIdentity, or STS. Prefer
short-lived credentials and read-only IAM policy scope.
metadata:
author: msaad00
homepage: https://github.com/msaad00/agent-bom
source: https://github.com/msaad00/agent-bom
pypi: https://pypi.org/project/agent-bom/
openclaw:
requires:
bins:
- python
env: []
credentials: aws-read-only
credential_policy: "Use the operator's existing AWS SDK credential chain. Prefer AWS SSO, WebIdentity, or STS assumed-role credentials. Do not ask users to paste access keys. Do not print credential values."
optional_env:
- AWS_PROFILE
- AWS_REGION
- AWS_DEFAULT_REGION
optional_bins: []
emoji: "\U0001F50E"
homepage: https://github.com/msaad00/agent-bom
source: https://github.com/msaad00/agent-bom
license: Apache-2.0
os:
- darwin
- linux
- windows
credential_handling: "Credentials stay in the operator environment. The skill invokes the AWS SDK locally and writes canonical inventory JSON with source_type=skill_invoked_pull. agent-bom receives sanitized inventory only when the operator explicitly scans or pushes that inventory."
data_flow: "Operator AWS account -> read-only AWS SDK calls -> canonical inventory JSON -> agent-bom inventory scan. No agent-bom-hosted service is required. Values matching credential patterns are redacted before persistence/export."
file_reads: []
file_writes:
- "operator-selected inventory JSON output path"
network_endpoints:
- url: "https://sts.amazonaws.com"
purpose: "Caller identity and assumed-role context"
auth: true
- url: "https://bedrock-agent.{region}.amazonaws.com"
purpose: "Bedrock agent inventory"
auth: true
- url: "https://ecs.{region}.amazonaws.com"
purpose: "ECS workload inventory when enabled"
auth: true
- url: "https://sagemaker.{region}.amazonaws.com"
purpose: "SageMaker inventory when enabled"
auth: true
- url: "https://lambda.{region}.amazonaws.com"
purpose: "Lambda inventory when enabled"
auth: true
- url: "https://eks.{region}.amazonaws.com"
purpose: "EKS inventory when enabled"
auth: true
- url: "https://states.{region}.amazonaws.com"
purpose: "Step Functions invento_meta.json
{
"ownerId": "kn7612j2dqa4vhvcpaygt6mcv981pft8",
"slug": "agent-bom-discover-aws",
"version": "0.108.3",
"publishedAt": 1791497905675
}skill-card.md
## Description: Helps operators discover AWS-hosted AI agents and related workloads, produce canonical inventory JSON, and optionally scan that inventory with agent-bom. This skill is ready for commercial/non-commercial use. ## Publisher: [msaad00](https://clawhub.ai/user/msaad00) ### License/Terms of Use: MIT-0 ## Use Case: Developers and cloud operators use this skill to inventory AI agents and workloads in approved AWS accounts and regions. They can optionally request local agent-bom findings or exports after reviewing the generated inventory. ### Deployment Geography for Use: Global ## Known Risks and Mitigations: Risk: AWS inventory can expose sensitive cloud architecture when shared or exported. Mitigation: Review inventory before sharing or exporting it and keep generated files at an operator-selected location. Risk: Broad AWS credentials or unintended account and region selection could expand the inventory scope. Mitigation: Use a read-only profile or short-lived assumed role, and confirm the account, regions, and services before discovery. ## Reference(s): - [ClawHub skill listing](https://clawhub.ai/msaad00/skills/agent-bom-discover-aws) - [Project homepage (declared in skill metadata; source provenance unavailable)](https://github.com/msaad00/agent-bom) - [agent-bom on PyPI](https://pypi.org/project/agent-bom/) ## Skill Output: **Output Type(s):** [Shell commands, Guidance, JSON inventory] **Output Format:** [Markdown guidance and shell commands; canonical JSON inventory file when executed] **Output Parameters:** [1D] **Other Properties Related to Output:** [Discovery-only by default; local scans and JSON or SARIF exports require operator approval.] ## Skill Version(s): 0.108.3 (source: skill frontmatter and ClawHub release) ## Ethical Considerations: Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.
activepieces
AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
cherry-studio
AI productivity studio with smart chat, autonomous agents, and 300+ assistants.
AionUi
Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!
CopilotKit
The Frontend for Agents & Generative UI. React + Angular
Machine-readable data
The same record, as JSON, for agents and crawlers.
{
"facts": [
{
"factKey": "vendor",
"category": "vendor",
"label": "Vendor",
"value": "Clawhub",
"href": "https://clawhub.ai/msaad00/skills/agent-bom-discover-aws",
"sourceUrl": "https://clawhub.ai/msaad00/skills/agent-bom-discover-aws",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-09T05:26:13.126Z",
"isPublic": true
},
{
"factKey": "protocols",
"category": "compatibility",
"label": "Protocol compatibility",
"value": "OpenClaw",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-msaad00-agent-bom-discover-aws/contract",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-msaad00-agent-bom-discover-aws/contract",
"sourceType": "contract",
"confidence": "medium",
"observedAt": "2026-10-09T05:26:13.126Z",
"isPublic": true
},
{
"factKey": "traction",
"category": "adoption",
"label": "Adoption signal",
"value": "4.4K downloads",
"href": "https://clawhub.ai/msaad00/agent-bom-discover-aws",
"sourceUrl": "https://clawhub.ai/msaad00/agent-bom-discover-aws",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-09T05:26:13.126Z",
"isPublic": true
},
{
"factKey": "latest_release",
"category": "release",
"label": "Latest release",
"value": "0.108.3",
"href": "https://clawhub.ai/msaad00/agent-bom-discover-aws",
"sourceUrl": "https://clawhub.ai/msaad00/agent-bom-discover-aws",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-10-08T22:18:25.675Z",
"isPublic": true
},
{
"factKey": "handshake_status",
"category": "security",
"label": "Handshake status",
"value": "UNKNOWN",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-msaad00-agent-bom-discover-aws/trust",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-msaad00-agent-bom-discover-aws/trust",
"sourceType": "trust",
"confidence": "medium",
"observedAt": null,
"isPublic": true
}
],
"events": [
{
"eventType": "release",
"title": "Release 0.108.3",
"description": "Release v0.108.3",
"href": "https://clawhub.ai/msaad00/agent-bom-discover-aws",
"sourceUrl": "https://clawhub.ai/msaad00/agent-bom-discover-aws",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-10-08T22:18:25.675Z",
"isPublic": true
}
]
}Record generated Oct 9, 2026.
