agent-bom-monitor
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
agent-bompackage viapipxorpip. This is a vendor-owned package on PyPI associated with the authormsaad00. - [COMMAND_EXECUTION]: The skill executes local CLI commands (
agent-bom fleet sync,agent-bom fleet list,agent-bom serve) to manage and view agent fleet status. - [PROMPT_INJECTION]: The skill reads data from a 'local scan state and fleet registry' (ingestion point) without explicit boundary markers. The skill's capabilities include local command execution and starting a local server (
agent-bom serve). While no explicit sanitization is mentioned, the risk is limited by the skill's read-only monitoring purpose and requirement for user confirmation before starting the server.
Audit Metadata