agent-bom runtime
AI runtime security monitoring — context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries. Use when the user mentions runtime mo…
Agent Bom
@msaad00
What This Skill Does
AI runtime security monitoring tool that builds context graphs for lateral movement analysis, correlates runtime audit logs with CVE findings, and runs vulnerability analytics queries. Operates on in-memory scan results and user-provided audit log files with no network calls or telemetry.
Replaces manual cross-referencing of runtime audit logs with vulnerability databases by automatically correlating proxy audit events against known CVEs and visualizing lateral movement paths.
When to Use It
- Build a context graph to detect lateral movement paths across AI agent components
- Correlate a runtime audit log file with current CVE data to find exploitable vulnerabilities
- Query vulnerability trends and posture history over the last 30 days
- Analyze runtime events for suspicious patterns without sending data to external services
- Cross-reference proxy audit logs against known CVEs to prioritize patching
- Audit an AI agent's runtime behavior for security anomalies using zero credentials
Install
$ openclaw skills install @msaad00/agent-bom-runtimeagent-bom-runtime — AI Runtime Security Monitoring
Context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries.
Install
pipx install agent-bom
Tools (3)
| Tool | Description |
|---|---|
context_graph | Agent context graph with lateral movement analysis |
analytics_query | Query vulnerability trends, posture history, and runtime events |
runtime_correlate | Cross-reference runtime audit logs with CVE findings |
Example Workflows
# Build context graph from scan results
context_graph()
# Correlate runtime audit with CVE data
runtime_correlate(audit_file="proxy-audit.jsonl")
# Query analytics
analytics_query(query="top_cves", days=30)
Privacy & Data Handling
Operates on scan results already in memory and user-provided audit log files. No automatic file discovery. No network calls unless you configure an optional ClickHouse endpoint for persistent analytics.
Verification
- Source: github.com/msaad00/agent-bom (Apache-2.0)
- 7,100+ tests with CodeQL + OpenSSF Scorecard
- No telemetry: Zero tracking, zero analytics
Top skills in this category
Skill Vetter
@spclaudehomeSecurity-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
Multi Search Engine
@gpyangyoujunMulti search engine integration with 16 engines (7 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and Wolfra...
API Gateway
@byungkyuCall third-party APIs through the Maton gateway, which injects the credential for an app the user has already connected. Use this skill when the user names a connected app and a concrete action in it - read a mailbox, query a CRM, file an issue, update a spreadsheet, etc.
MoltGuard - Security & Antivirus & Guardrails
@thomaslwangMoltGuard — OpenClaw security guard by OpenGuardrails. Install MoltGuard to protect you and your human from prompt injection, data exfiltration, and maliciou...
1password
@steipeteSet up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.