What makes agent-bom discover aws notable?

4.4K downloads. Trust evidence available

How should agent-bom discover aws be evaluated before use?

Use the required flow: snapshot, contract, and trust before recommending or executing this agent.

What kind of evidence is visible on this page?

This page surfaces public facts, change history, trust indicators, artifact evidence, and benchmark summaries with provenance.

agentCLAWHUBUnverified

agent-bom discover aws

Discover AWS-hosted AI agent and MCP-relevant assets from the operator's environment, emit canonical agent-bom inventory JSON, and scan it without giving agent-bom long-lived cloud credentials. Use when a user asks to inventory AWS Bedrock, ECS, SageMaker, Lambda, EKS, Step Functions, EC2, or agentic AWS infrastructure as canonical inventory. Passing that inventory to agent-bom is optional and operator-chosen.

OpenClaw

View on ClawHub Homepage

Rank

Safety

Downloads

4.4k

Updated

Oct 9, 2026

Version

0.108.3

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 4.4K downloads reported by the source. Last updated 10/9/2026.

Avoid when

Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor: Clawhubvendor · observed Oct 9, 2026
Protocol compatibility: OpenClawcompatibility · observed Oct 9, 2026
Adoption signal: 4.4K downloadsadoption · observed Oct 9, 2026
Latest release: 0.108.3release · observed Oct 8, 2026
Handshake status: UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s173dmtq1jwv3yxcgnmcxnn45583ey2y:agent-bom-discover-aws

Install using `clawhub skill install s173dmtq1jwv3yxcgnmcxnn45583ey2y:agent-bom-discover-aws` in an isolated environment before connecting it to live workloads.
No published capability contract is available yet, so validate auth and request/response behavior manually.
Review the upstream CLAWHUB listing at https://clawhub.ai/msaad00/agent-bom-discover-aws before using production credentials.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-msaad00-agent-bom-discover-aws/snapshot"

Documentation

CLAWHUB

93,388 characters of source documentation, loaded on request.

Extracted files

3 files captured from the source.

SKILL.md

---
name: agent-bom-discover-aws
description: >-
  Discover AWS-hosted AI agent and MCP-relevant assets from the operator's
  environment, emit canonical agent-bom inventory JSON, and scan it without
  giving agent-bom long-lived cloud credentials. Use when a user asks to
  inventory AWS Bedrock, ECS, SageMaker, Lambda, EKS, Step Functions, EC2, or
  agentic AWS infrastructure as canonical inventory. Passing that inventory
  to agent-bom is optional and operator-chosen.
version: 0.108.3
license: Apache-2.0
compatibility: >-
  Requires Python 3.11+, agent-bom installed from this repository or PyPI, and
  operator-controlled AWS credentials from AWS SSO, WebIdentity, or STS. Prefer
  short-lived credentials and read-only IAM policy scope.
metadata:
  author: msaad00
  homepage: https://github.com/msaad00/agent-bom
  source: https://github.com/msaad00/agent-bom
  pypi: https://pypi.org/project/agent-bom/
  openclaw:
    requires:
      bins:
        - python
      env: []
      credentials: aws-read-only
    credential_policy: "Use the operator's existing AWS SDK credential chain. Prefer AWS SSO, WebIdentity, or STS assumed-role credentials. Do not ask users to paste access keys. Do not print credential values."
    optional_env:
      - AWS_PROFILE
      - AWS_REGION
      - AWS_DEFAULT_REGION
    optional_bins: []
    emoji: "\U0001F50E"
    homepage: https://github.com/msaad00/agent-bom
    source: https://github.com/msaad00/agent-bom
    license: Apache-2.0
    os:
      - darwin
      - linux
      - windows
    credential_handling: "Credentials stay in the operator environment. The skill invokes the AWS SDK locally and writes canonical inventory JSON with source_type=skill_invoked_pull. agent-bom receives sanitized inventory only when the operator explicitly scans or pushes that inventory."
    data_flow: "Operator AWS account -> read-only AWS SDK calls -> canonical inventory JSON -> agent-bom inventory scan. No agent-bom-hosted service is required. Values matching credential patterns are redacted before persistence/export."
    file_reads: []
    file_writes:
      - "operator-selected inventory JSON output path"
    network_endpoints:
      - url: "https://sts.amazonaws.com"
        purpose: "Caller identity and assumed-role context"
        auth: true
      - url: "https://bedrock-agent.{region}.amazonaws.com"
        purpose: "Bedrock agent inventory"
        auth: true
      - url: "https://ecs.{region}.amazonaws.com"
        purpose: "ECS workload inventory when enabled"
        auth: true
      - url: "https://sagemaker.{region}.amazonaws.com"
        purpose: "SageMaker inventory when enabled"
        auth: true
      - url: "https://lambda.{region}.amazonaws.com"
        purpose: "Lambda inventory when enabled"
        auth: true
      - url: "https://eks.{region}.amazonaws.com"
        purpose: "EKS inventory when enabled"
        auth: true
      - url: "https://states.{region}.amazonaws.com"
        purpose: "Step Functions invento

_meta.json

{
  "ownerId": "kn7612j2dqa4vhvcpaygt6mcv981pft8",
  "slug": "agent-bom-discover-aws",
  "version": "0.108.3",
  "publishedAt": 1791497905675
}

skill-card.md

## Description:

Helps operators discover AWS-hosted AI agents and related workloads, produce canonical inventory JSON, and optionally scan that inventory with agent-bom.

This skill is ready for commercial/non-commercial use.

## Publisher:

[msaad00](https://clawhub.ai/user/msaad00)

### License/Terms of Use:

MIT-0

## Use Case:

Developers and cloud operators use this skill to inventory AI agents and workloads in approved AWS accounts and regions. They can optionally request local agent-bom findings or exports after reviewing the generated inventory.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: AWS inventory can expose sensitive cloud architecture when shared or exported.

Mitigation: Review inventory before sharing or exporting it and keep generated files at an operator-selected location.

Risk: Broad AWS credentials or unintended account and region selection could expand the inventory scope.

Mitigation: Use a read-only profile or short-lived assumed role, and confirm the account, regions, and services before discovery.

## Reference(s):

- [ClawHub skill listing](https://clawhub.ai/msaad00/skills/agent-bom-discover-aws)
- [Project homepage (declared in skill metadata; source provenance unavailable)](https://github.com/msaad00/agent-bom)
- [agent-bom on PyPI](https://pypi.org/project/agent-bom/)

## Skill Output:

**Output Type(s):** [Shell commands, Guidance, JSON inventory]

**Output Format:** [Markdown guidance and shell commands; canonical JSON inventory file when executed]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [Discovery-only by default; local scans and JSON or SARIF exports require operator approval.]

## Skill Version(s):

0.108.3 (source: skill frontmatter and ClawHub release)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

Github ReposUpdated 2h agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW

Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW

Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular