Stats
Actions
Tags
From SBOM Emitter
Generates a CycloneDX SBOM (bom-npm.cdx.json or bom-pip.cdx.json) for the current repo by detecting npm or pip ecosystem and shelling out to the matching tool. Use when the developer asks for an SBOM, runs the release workflow, or needs to satisfy CISA SBOM / EU CRA requirements. Auto-fires on tag push via release.yml. Do not use for license compliance scanning (see license-gate).
How this skill is triggered — by the user, by Claude, or both
Slash command
/sbom-emitter:sbom-awarenessThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
- Repo has either `package.json` (npm) OR `pyproject.toml` / `requirements*.txt` (pip).
package.json (npm) OR pyproject.toml / requirements*.txt (pip).npx available.cyclonedx-bom installed (pip install cyclonedx-bom).bash ${CLAUDE_PLUGIN_ROOT}/scripts/check-tools.sh to verify tooling.bash ${CLAUDE_PLUGIN_ROOT}/scripts/emit-sbom.sh <repo-root>.bom-npm.cdx.json and/or bom-pip.cdx.json exist at repo root.Provides UI/UX resources: 50+ styles, color palettes, font pairings, guidelines, charts for web/mobile across React, Next.js, Vue, Svelte, Tailwind, React Native, Flutter. Aids planning, building, reviewing interfaces.
Fetches up-to-date documentation from Context7 for libraries and frameworks like React, Next.js, Prisma. Use for setup questions, API references, and code examples.
npx claudepluginhub enchanter-ai/hydra --plugin sbom-emitter