agent-bom scan
Check vulnerabilities in a specified package/version, repository, container image, or SBOM, or inspect a specified CVE. Discover local MCP clients only when the user explicitly requests that discovery. Ask for the target when a request such as "verify" or "is this safe" does not
as observed 2026-10-16T19:37:29.109Z- Identifier
agent-bom-scan- Source
- ClawHub
- Version observed
- 0.109.0
- Source repository
- not published
- Repository observation
- No source repository listed
- First observed here
- 2026-08-28T22:06:37.311Z
- Observations recorded
- 16
- Installs (reported upstream)
- 72
- Weekly downloads (upstream)
- 5,186
- Declared license
- MIT-0
Observation history
2026-10-16T19:37:29.109Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.108.4" | "Release v0.109.0" |
latestVersion |
"0.108.4" | "0.109.0" |
2026-10-10T14:15:52.413Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.108.3" | "Release v0.108.4" |
latestVersion |
"0.108.3" | "0.108.4" |
2026-10-09T13:20:37.333Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.108.2" | "Release v0.108.3" |
latestVersion |
"0.108.2" | "0.108.3" |
2026-10-08T12:19:32.804Z
Fields that differed: changelog latestVersion summary
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.108.1" | "Release v0.108.2" |
latestVersion |
"0.108.1" | "0.108.2" |
summary |
"Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi | "Check vulnerabilities in a specified package/version, repository, container image, or SBOM, or inspect a specified CVE. Discover local MCP clients only when the user explicitly re |
2026-10-07T11:52:53.866Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.108.0" | "Release v0.108.1" |
latestVersion |
"0.108.0" | "0.108.1" |
2026-10-04T09:46:17.065Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.107.2" | "Release v0.108.0" |
latestVersion |
"0.107.2" | "0.108.0" |
2026-10-02T07:46:18.975Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.107.0" | "Release v0.107.2" |
latestVersion |
"0.107.0" | "0.107.2" |
2026-10-01T06:47:50.210Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.106.1" | "Release v0.107.0" |
latestVersion |
"0.106.1" | "0.107.0" |
2026-09-27T02:45:50.156Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.105.0" | "Release v0.106.1" |
latestVersion |
"0.105.0" | "0.106.1" |
2026-09-18T20:20:38.833Z
Fields that differed: license changelog description latestVersion
| Field | Before | After |
|---|---|---|
license |
null | "MIT-0" |
changelog |
"Release v0.104.0" | "Release v0.105.0" |
description |
"Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi | null |
latestVersion |
"0.104.0" | "0.105.0" |
2026-09-15T17:18:40.381Z
Fields that differed: changelog description displayName latestVersion summary topics
| Field | Before | After |
|---|---|---|
changelog |
"v2.0.0: full rebuild — working BOM scanner (8 lockfile parsers, OSV-verified 34-record offline DB, runtime CVSS 3.1 vs NVD-verified, explicit online mode with name+version+ecosyst | "Release v0.104.0" |
description |
"BOM (bill of materials) vulnerability scanner that parses 8 lockfile formats, matches versions against an OSV-verified advisory database, and emits provenance-stamped findings. Us | "Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi |
displayName |
"agent-bom-scan" | "agent-bom scan" |
latestVersion |
"2.0.0" | "0.104.0" |
summary |
"BOM (bill of materials) vulnerability scanner that parses 8 lockfile formats, matches versions against an OSV-verified advisory database, and emits provenance-stamped findings. Us | "Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi |
topics |
["cve","dependency-scanning","sbom","security","supply-chain"] | ["Agentic","Vulnerability"] |
2026-09-10T12:18:05.764Z
Fields that differed: changelog description displayName latestVersion summary topics
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.103.2" | "v2.0.0: full rebuild — working BOM scanner (8 lockfile parsers, OSV-verified 34-record offline DB, runtime CVSS 3.1 vs NVD-verified, explicit online mode with name+version+ecosyst |
description |
"Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi | "BOM (bill of materials) vulnerability scanner that parses 8 lockfile formats, matches versions against an OSV-verified advisory database, and emits provenance-stamped findings. Us |
displayName |
"agent-bom scan" | "agent-bom-scan" |
latestVersion |
"0.103.2" | "2.0.0" |
summary |
"Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi | "BOM (bill of materials) vulnerability scanner that parses 8 lockfile formats, matches versions against an OSV-verified advisory database, and emits provenance-stamped findings. Us |
topics |
["Agentic","Vulnerability"] | ["cve","dependency-scanning","sbom","security","supply-chain"] |
2026-09-03T07:20:35.503Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.102.0" | "Release v0.103.2" |
latestVersion |
"0.102.0" | "0.103.2" |
2026-08-29T23:02:09.822Z
Fields that differed: changelog description displayName latestVersion summary topics
| Field | Before | After |
|---|---|---|
changelog |
"README-only documentation: complete functionality, usage, permissions, security/privacy, related emojis, and corrected TREE-SHA256-v1 verification excluding registry-generated met | "Release v0.102.0" |
description |
"🔍 Deep vulnerability scanning for software bill of materials. Detect CVEs, analyze dependencies, assess supply chain risks, and generate detailed security reports." | "Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi |
displayName |
"Agent Bom Scan" | "agent-bom scan" |
latestVersion |
"1.0.8" | "0.102.0" |
summary |
"🔍 Deep vulnerability scanning for software bill of materials. Detect CVEs, analyze dependencies, assess supply chain risks, and generate detailed security reports." | "Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi |
topics |
["agents","compliance","dependency-scanning","sbom","security"] | ["Agentic","Vulnerability"] |
2026-08-28T22:54:39.947Z
Fields that differed: changelog description displayName latestVersion summary topics
| Field | Before | After |
|---|---|---|
changelog |
"Release v0.102.0" | "README-only documentation: complete functionality, usage, permissions, security/privacy, related emojis, and corrected TREE-SHA256-v1 verification excluding registry-generated met |
description |
"Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi | "🔍 Deep vulnerability scanning for software bill of materials. Detect CVEs, analyze dependencies, assess supply chain risks, and generate detailed security reports." |
displayName |
"agent-bom scan" | "Agent Bom Scan" |
latestVersion |
"0.102.0" | "1.0.8" |
summary |
"Open security scanner for agentic infrastructure — agents, MCP, packages, blast radius, runtime, and trust for package CVEs (OSV, NVD, EPSS, KEV), container images, provenance, fi | "🔍 Deep vulnerability scanning for software bill of materials. Detect CVEs, analyze dependencies, assess supply chain risks, and generate detailed security reports." |
topics |
["Agentic","Vulnerability"] | ["agents","compliance","dependency-scanning","sbom","security"] |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.