Agent Skills by OWASP cdxgen
Showing 6 vetted skills indexed across 1 GitHub repositories.
cdxgensbom-fidelity-loop
Iteratively executes cdxgen introspection remediations to raise SBOM fidelity tiers.
cdxgenecosystem-onboarding
Guides adding new language and package manager support to cdxgen.
cdxgencustom-property-author
Guides authoring and reviewing CycloneDX cdx: custom properties in cdxgen BOM output.
cdxgencdxgen
Generate CycloneDX JSON BOMs and SPDX 3.0.1 JSON-LD exports from software artifacts.
cdxgenbom-slimmer
Analyzes direct dependencies and suggests lightweight custom replacements using cdxgen SBOM evidence.
cdxgencyclonedx-spec-reviewer
Review cdxgen changes for CycloneDX schema compliance and semantic correctness.
Frequently Asked Questions About OWASP cdxgen
FAQPage SchemaWhat specific tasks does this enable for security engineers?▼
It enables the automated generation of CycloneDX and SPDX 3.0.1 inventory files from existing software artifacts. Security engineers use these outputs to maintain visibility into third-party components, track transitive dependencies, and ensure compliance with software supply chain transparency requirements across complex enterprise environments.
What are the prerequisites for generating inventory exports?▼
The primary prerequisite is a local environment containing the software project source code or build artifacts. It requires a runtime environment capable of executing the package to scan manifest files, lockfiles, and binary signatures to construct an accurate, machine-readable inventory of all included components.
Is this project open-source and what is the cost?▼
Yes, this is an open-source project under the OWASP umbrella, available at no cost. It is distributed under the Apache 2.0 license, allowing for free integration into commercial security pipelines, internal compliance reporting, and private software supply chain governance initiatives without licensing fees.