Menu
Generate fast local OpenACA inventory from Claude Code endpoint or project configuration without running advisory lookups.
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
Run OpenACA scans from Claude Code when the user asks to scan agent components, check Claude Code configuration, inspect MCP servers/plugins/skills/hooks, or assess agent supply-chain risk.
Configure, check, or run explicit OpenACA Cloud sync for a Claude Code endpoint.
Guide agent supply-chain triage after Claude Code MCP, plugin, skill, hook, command, or settings changes.
Generate an OpenACA Agent BOM when the user asks for a bill of materials, Agent BOM, inventory export, or structured list of agent components.
Explain OpenACA findings, Agent BOM entries, scan output, severity, confidence, source provenance, and suggested next steps.
| name | inventory |
| description | Generate fast local OpenACA inventory from Claude Code endpoint or project configuration without running advisory lookups. |
| argument-hint | [endpoint|project] [optional output path] |
| allowed-tools | ["Bash","Read"] |
Use this skill when the user asks what Claude Code plugins, MCP servers, skills, hooks, commands, packages, or agent components are installed or wired together, and they do not explicitly need vulnerability or posture findings.
Generate an endpoint Agent BOM:
uvx --isolated --from openaca openaca bom endpoint --output openaca-agent-bom.json
Include project-local Claude configuration when the user is working in a project and wants that layered into the endpoint view:
uvx --isolated --from openaca openaca bom endpoint --project . --output openaca-agent-bom.json
If uvx is unavailable but openaca is installed, use the same command
without the uvx prefix.
If the user has a previous BOM and the installed OpenACA CLI supports
bom diff, compare snapshots before recommending a deeper scan:
uvx --isolated --from openaca openaca bom diff --before openaca-agent-bom.previous.json --after openaca-agent-bom.json
bom diff is local and does not run advisory lookups. It reports added,
removed, and changed component occurrences plus composition-edge changes.
Summarize inventory as composition, not safety:
If the user wants advisories or posture findings, suggest /openaca:scan.
Do not upload or paste the full BOM unless the user asks. BOMs can include local paths, URLs, component names, and source provenance.