Skip to content
TrustedSkillsbeta
Back to all skills

Artifact Sbom Publisher

Listed
monkey1sai·vlatest·devops

Generates SBOMs from artifact data, streamlining supply chain security and compliance reporting for software projects.

Repository

Install on your platform

This skill no longer installs under the name artifact-sbom-publisher. monkey1sai/openai-cli is deleted or private, so it cannot be installed from.

We check each listing against its upstream repository with the rules the skills CLI uses, last on 2026-10-25. We don't show a command we know will fail.

Repository install instructions

What we know about this skill

Publisher

monkey1sai

Taken from the source listing. We haven't verified who controls this account.

Install target

Live repository

Not pinned. Installing fetches whatever the repository holds at the time you run the command.

Nobody has reviewed this code. TrustedSkills indexes and links skills; it does not audit, run or scan them. A skill runs with whatever access you give your agent — read the source before you install it.

Automated safety checks

scanned

We could not read this skill's source, so none of the checks below were run.

Not scanned. repository not found or private Source recorded as monkey1sai/openai-cli.
This is a static scan, not a review. It reads the skill's files; it does not run them, and it cannot tell you whether the skill is any good or whether the code does what its description says. A skill runs with whatever access you give your agent.
What each check looks for →

About this skill

What it does

The artifact-sbom-publisher skill automates the publishing of Software Bill of Materials (SBOMs) for software artifacts. It generates SBOM documents, typically in formats like SPDX or CycloneDX, and publishes them to a designated repository or endpoint. This facilitates improved supply chain security and vulnerability management by providing detailed component information about deployed software.

When to use it

  • Automated Release Pipelines: Integrate into CI/CD pipelines to automatically generate and publish SBOMs with each new artifact release.
  • Software Supply Chain Compliance: Meet regulatory requirements or internal policies that mandate SBOM generation and distribution.
  • Vulnerability Management: Enable proactive identification and remediation of vulnerabilities by providing a comprehensive list of software components.
  • Internal Audits: Simplify the process of demonstrating software composition for security audits.

Key capabilities

  • SBOM Generation (SPDX, CycloneDX)
  • Automated Publishing to Repositories/Endpoints
  • Integration with CI/CD pipelines

Example prompts

  • "Publish an SBOM for artifact my-app-1.2.3 in SPDX format."
  • "Generate a CycloneDX SBOM and publish it to the internal artifact repository."
  • “Create an SBOM for this Docker image, including all dependencies.”

Tips & gotchas

The skill requires appropriate credentials or access permissions to publish to the target repository or endpoint. Ensure these are configured correctly before execution.