Scan local endpoints to inventory packages, browser extensions, and MCP servers.
npx skills add https://github.com/zcaceres/skills --skill security-bumblebee
Please help me install this Agent Skill. Skill: security-bumblebee Source: https://github.com/zcaceres/skills/tree/main/skills/security-bumblebee Command: npx skills add https://github.com/zcaceres/skills --skill security-bumblebee
This skill addresses the challenge of knowing exactly which software packages, browser extensions, and MCP servers are currently installed on your machine, allowing for rapid response when security advisories are released.
Invoke the security-bumblebee skill to perform a baseline scan of your machine and identify potential supply-chain exposures.
High-intent search queries and answers about installing and using this skill.
Local endpoint inventory scanning catalogs installed packages, browser extensions, and MCP server configurations by performing a read-only scan of your machine. It generates searchable NDJSON logs to identify your current software state.
Advisory lookup compares your local endpoint inventory against known vulnerability catalogs. You can query the generated NDJSON logs to check if a specific vulnerable package version exists on your disk.
Supply-chain exposure assessment identifies risks from installed software. Drift detection compares current endpoint scans against historical NDJSON data to identify newly installed packages or configuration changes.
Yes, you need Go, jq, and the bumblebee binary to execute baseline scans and generate searchable NDJSON logs. These dependencies are required to facilitate the local endpoint inventory scanning process.
Yes, drift detection compares current scans against historical data to identify newly installed software or configuration changes. This allows rapid response when security advisories are released for your installed packages.
The best way is performing a read-only endpoint inventory scan to catalog browser extensions and MCP server configurations. This generates searchable NDJSON logs for rapid advisory lookup and exposure assessment.
zcaceresScan local machine endpoints to inventory installed software packages, browser extensions, and MCP server configurations.
ProyectoG007Monitor AI environments for security advisories and verify software integrity.
DCx7C5Parse CycloneDX and SPDX SBOMs to map components to CVEs via NVD 2.0.
woxiangyangzhimaoIdentify exploitable vulnerabilities in code repositories and prepare bounty reports for Huntr and HackerOne.
