Aibom Python Packages

agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.

airom

Open-source AI Bill of Materials (AIBOM) scanner: inventories AI models, datasets, prompts, embeddings, vector DBs & RAG pipelines across code, containers & Kubernetes — with file:line evidence, load-time risk detection (poisoned pickle / Keras Lambda / unsafe torch.load) and NIST AI RMF / OWASP compliance mapping. CycloneDX · SARIF · JSON.

mcplint-sec

Local-first, CI-native security scanner for MCP servers — OWASP MCP Top 10 rules, lockfile & AIBOM. Never executes your servers.

agent-harness-aibom

AIBOM generator for AI agent harnesses (Hermes, OpenClaw) - CycloneDX 1.6 output for runtime, model, skill, MCP, hook, and secrets-surface components

pitloom

SBOM generation for Python & AI projects. Native Hatchling build-hook. Extract metadata from GGUF, ONNX, and PyTorch models. Build SBOM directly from Hugging Face URL.

aisbom-cli

Static security scanner for ML model files — detects pickle bombs, Keras Lambda RCE and GGUF template injection, and generates CycloneDX / SPDX AI-BOMs (AIBOM) as EU AI Act, CRA and FDA §524B evidence.

air-blackbox

Open-source EU AI Act compliance scanner. 51 checks across Articles 9-12, 14-15. Drop-in trust layers for LangChain, CrewAI, AutoGen, OpenAI. Local-first, no data leaves your machine.

agent-discover-scanner

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

agentdiscover

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

bulwark-scanner

Security scanner for MCP servers and AI agents. Detects prompt injection in tool descriptions, tool poisoning, rug pulls, supply-chain risk and the lethal trifecta. Pins tool definitions to a lockfile and enforces it at runtime. SARIF + CycloneDX AIBOM. Zero dependencies.

ladex

A bill of lading for AI: shift-left AI governance and ML-BOM generation for developers.

aibom-scanner

Scan codebases for AI SDK usage and map compliance risks to NIST AI RMF, ISO 42001, and EU AI Act

quin-scanner

AI Agent Scanner - A standalone AI Agent scanner that can discover agent repos, configuration, system prompts, classify risk and produce compliance-ready reports