connect-declarative-schema

Loads custom service catalog and CMDB data into the SubImage graph via AWS S3 or GCS using declarative YAML schemas and JSONL shaping.

Updated Apr 30, 2026
One-click install
npx skills add https://github.com/subimagesec/skills --skill connect-declarative-schema
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: connect-declarative-schema
Source: https://github.com/subimagesec/skills/tree/main/plugins/subimage-setup/skills/connect-declarative-schema
Command: npx skills add https://github.com/subimagesec/skills --skill connect-declarative-schema

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It brings service catalogs, owner mappings, CMDB records, and other custom business context into the SubImage graph so they can be joined with existing cloud and identity data.

Core Features & Use Cases

  • Custom Graph Ingestion: Shapes source records as JSONL and maps them into new graph nodes and relationships.
  • Safe Schema Authoring: Defines declarative YAML schemas with required identifiers, labels, properties, and joins.
  • AWS and GCS Plumbing: Sets up the S3 or GCS access needed to sync data into SubImage.
  • Use Case: Connect a company service catalog to cloud accounts, team ownership, and business criticality metadata for richer investigation and reporting.

Quick Start

Tell me your storage provider, bucket name, schema identifier, node types, and join fields, and I will generate the schema, data layout, and required cloud setup for your declarative source.

Frequently Asked Questions about connect-declarative-schema

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I import a custom service catalog and CMDB data into a graph database?

To import a custom service catalog and CMDB data, you shape source records as JSONL and map them into new graph nodes using declarative YAML schemas. This process joins business metadata like team ownership and application criticality with existing cloud and identity nodes.

What is required to set up declarative schema ingestion for AWS or GCS?

Setting up declarative schema ingestion for AWS or GCS requires configuring S3 or GCS storage plumbing, authoring a YAML schema with mandatory identifiers and relationship joins, and shaping your source records as JSONL files for graph ingestion.

Can I join my CMDB records with existing cloud accounts and identity nodes?

Yes, you can join CMDB records with existing cloud accounts and identity nodes. By defining relationship joins in your declarative YAML schema, the ingestion process connects your custom business context directly to current cloud and identity graph data.

How do I map JSONL source records into graph nodes and relationships?

You map JSONL source records into graph nodes by authoring a declarative YAML schema. This schema defines required identifier fields, node labels, properties, and relationship joins needed to accurately structure your custom business data within the graph.

What fields are mandatory when authoring a YAML schema for graph ingestion?

Mandatory fields when authoring a YAML schema for graph ingestion include required identifiers, node labels, properties, and relationship joins. You must also specify your storage provider, bucket name, schema identifier, node types, and join fields.

Does declarative schema ingestion work with both AWS S3 and Google Cloud Storage?

Yes, declarative schema ingestion works with both AWS S3 and Google Cloud Storage. The workflow supports provider specific S3 or GCS plumbing to successfully sync your custom business data into the SubImage graph.