Look up MCP servers in a bundled security registry and assess trust.
npx skills add https://github.com/msaad00/agent-bom --skill agent-bom-registry
Please help me install this Agent Skill. Skill: agent-bom-registry Source: https://github.com/msaad00/agent-bom/tree/main/integrations/openclaw/registry Command: npx skills add https://github.com/msaad00/agent-bom --skill agent-bom-registry
Look up MCP servers in a bundled security registry and assess their trust and readiness.
Run the registry_lookup workflow to identify a server, then run skill_trust and code_scan to validate trust and security posture.
High-intent search queries and answers about installing and using this skill.
MCP server trust and risk scoring is performed by looking up server metadata in a bundled security registry, enabling pre-install marketplace checks and vendor risk assessment. The registry contains over 427 server entries for validation.
Semgrep SAST code scanning is supported as an optional feature for MCP server security validation. You can run the code_scan workflow after registry lookup to assess the security posture of identified servers.
Fleet readiness for large MCP server inventories is assessed through batch risk scoring against the bundled registry. This streamlines onboarding and compliance by evaluating trust and readiness across multiple servers simultaneously.
MCP security registry lookups operate with zero-network data flow using in-memory data lookups. The registry is bundled locally, ensuring server metadata checks and risk scoring run without external network connectivity.
Skill trust validation and SAST scanning starts by running the registry_lookup workflow to identify the MCP server, then executing skill_trust and code_scan workflows to validate trust and security posture.
xtrm-devBootstrap a GitHub security pipeline with secret scanning, SAST, and dependency checks.
rifh2000Automate vendor risk assessments with standardized questionnaires and risk scoring.
projectedanxAudit source code repositories with a four-phase state machine for security vulnerabilities.
0xRayAIAutomate security auditing and compliance validation for software projects.
