Enumerate AWS software dependencies, generate an SBOM, and scan for vulnerabilities.
npx skills add https://github.com/kkmookhey/shasta --skill sbom-kkmookhey
Please help me install this Agent Skill. Skill: sbom Source: https://github.com/kkmookhey/shasta/tree/main/.claude/skills/sbom Command: npx skills add https://github.com/kkmookhey/shasta --skill sbom-kkmookhey
This SBOM skill automates the discovery of software dependencies in AWS, builds a Software Bill of Materials, and checks for known vulnerabilities and supply chain risks to streamline governance.
Run the SBOM discovery and vulnerability scan using the configured Python command from shasta.config.json to generate an SBOM and vulnerability report.
High-intent search queries and answers about installing and using this skill.
An SBOM scan discovers open-source and third-party components in your AWS environment to identify known vulnerabilities and supply chain risks. It produces a comprehensive Software Bill of Materials along with a vulnerability summary report for governance.
This skill automates vulnerability scanning by building a Software Bill of Materials from your AWS software dependencies and checking it for known vulnerabilities. It then produces an audit-ready vulnerability summary report highlighting critical threats and remediation needs.
Yes, this skill generates audit-ready artifacts for supply-chain compliance by inventorying your AWS software dependencies into a comprehensive SBOM. It outputs a vulnerability summary report designed to streamline governance and supply-chain risk management audits.
You need a configured Python command specified in your shasta.config.json file to run an SBOM discovery scan in AWS. This setup allows the skill to enumerate dependencies, build the SBOM, and execute the vulnerability scan.
This vulnerability scan covers both known vulnerabilities and supply chain risks. After building the SBOM from your AWS dependencies, it checks for known CVEs and broader supply chain threats to produce a comprehensive vulnerability summary report.
transilienceaiCompile AWS IAM user permissions and activity for quarterly SOC 2 access reviews.
hoavdcIdentifies and prioritizes critical, evidence-backed issues in code changes.
luissimon96Audit dependencies, generate SBOMs, and check license compliance for software projects.
jeremylongshoreScan codebases, dependencies, and configurations for security vulnerabilities and CVEs.
