C ▼ declining
Trend declining: -4,237 downloads in the last 7 days vs 4,357 in the 7 before (-197%). The trend is not the direction of the rating.
below the trust line (BBB): unproven adoption, young, or flagged instructions.
Offline SBOM + verifiable compliance scanner for agent projects: generates a CycloneDX 1.5 JSON SBOM from npm/pip/go manifests, audits the tree with a curated rule engine (committed-secret detection with redacted evidence, unpinned-dependency supply-chain check, declared-vs-actual network egress dri
| Downloads | 208 (7d: -4,237) |
| Installs · stars · versions | 1 · 0 · 13 |
| Track record | 186 days in the registry |
| Author | msaad00 |
| Requires | none declared |
| Instructions read | yes: payees, wallets and shell patterns extracted from SKILL.md |
| service | service rating | wallet |
|---|---|---|
| No payee found in its instructions. | ||
openclaw skills install @msaad00/agent-bom-compliance ·
registry page
For agents
Free JSON: https://agenteconomy.report/k/agent-bom-compliance.json · badge: https://agenteconomy.report/k/agent-bom-compliance.svg ·
paid record via x402: GET https://agenteconomy.report/api/skill/agent-bom-compliance (US$ 0.005). Check any skill before installing it
with the x402-trust-check skill.
Code audit
No independent code audit of this skill yet. Commission one (US$ 29 per version; the result is published whatever it says).
Adoption (downloads relative to the registry, 7-day velocity, installs), maturity (age, release cadence, stars, author portfolio), inherited payment trust (every host or wallet the skill's instructions pay is looked up in the x402 service trust index; paying a rated service inherits its tier, an unknown hard-coded wallet is flagged) and hygiene (registry moderation verdict, license, declared setup, origin). Flags cap the tier, they never add to it. Trust line at BBB. Rating as of 2026-09-14.