agent-bom runtime
VerifiedAI runtime security monitoring — context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries. Use when the u...
$ Add to .claude/skills/ About This Skill
# agent-bom-runtime — AI Runtime Security Monitoring
Context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries.
Install
```bash pipx install agent-bom ```
Tools (3)
| Tool | Description | |------|-------------| | `context_graph` | Agent context graph with lateral movement analysis | | `analytics_query` | Query vulnerability trends, posture history, and runtime events | | `runtime_correlate` | Cross-reference runtime audit logs with CVE findings |
Example Workflows
``` # Build context graph from scan results context_graph()
# Correlate runtime audit with CVE data runtime_correlate(audit_file="proxy-audit.jsonl")
# Query analytics analytics_query(query="top_cves", days=30) ```
Privacy & Data Handling
Operates on scan results already in memory and user-provided audit log files. No automatic file discovery. No network calls unless you configure an optional ClickHouse endpoint for persistent analytics.
Verification
- Source: github.com/msaad00/agent-bom (Apache-2.0)
- 6,040+ tests with CodeQL + OpenSSF Scorecard
- No telemetry: Zero tracking, zero analytics
Use Cases
- Monitor AI agent runtime behavior with context graph analysis
- Correlate audit logs with CVE findings for active threat detection
- Detect lateral movement patterns in multi-agent deployments
- Query vulnerability analytics across running agent infrastructure
- Generate runtime security reports for compliance and incident response
Pros & Cons
Pros
- +Context graph visualization reveals lateral movement and attack paths
- +Correlates runtime behavior with known vulnerabilities for proactive defense
- +Complements agent-bom-scan for a full supply-chain-to-runtime security story
Cons
- -Requires agent-bom package installation — not standalone
- -Only 3 tools — limited scope compared to full security monitoring suites
- -Focused on AI agent infrastructure — not a general-purpose security monitor
FAQ
What does agent-bom runtime do?
What platforms support agent-bom runtime?
What are the use cases for agent-bom runtime?
100+ free AI tools
Writing, PDF, image, and developer tools — all in your browser.
Next Step
Use the skill detail page to evaluate fit and install steps. For a direct browser workflow, move into a focused tool route instead of staying in broader support surfaces.