Generate CycloneDX and SPDX SBOMs from container images and filesystems with Syft, correlate them to CVEs with Grype, and sign/attest them with Cosign. Use when you need a machine-readable dependency inventory for supply-chain risk, want to scan images or SBOMs for known vulnerabilities, or are embedding SBOM generation and vulnerability gating into CI/CD.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill generating-and-analyzing-sbomsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill generating-and-analyzing-sboms -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill generating-and-analyzing-sboms -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/generating-and-analyzing-sbomsgh skill install mukul975/Anthropic-Cybersecurity-Skills generating-and-analyzing-sbomsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/generating-and-analyzing-sboms ~/.claude/skills/generating-and-analyzing-sboms # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/generating-and-analyzing-sboms ~/.agents/skills/generating-and-analyzing-sboms # Codex, Cursor, Gemini CLI, Copilot, OpenCode