ns-generate-sbom
Generates a Software Bill of Materials (SBOM) for a connected or registered N|Solid Node.js app. Use when the user asks for SBOM, software bill of materials, compliance evidence, SOC2/vendor review, license inventory, dependency inventory, or transitive package report for a running application.
Install
With your agent
Install OMGSkills skill "nodesource/nsolid-skills-plugin:skills/ns-generate-sbom" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/nodesource/nsolid-skills-plugin /tmp/nsolid-skills-plugin && ln -s /tmp/nsolid-skills-plugin/skills/ns-generate-sbom ~/.claude/skills/ns-generate-sbomFrom README
Instructions Identify Target Application Determine the specific app name you need the SBOM for. If the app name is unknown, call information-dashboard (no parameters) to list all connected agents and their app names. Do NOT use global-filter — it returns 18,000 tokens and is wasteful for a simple app name lookup. Determine Format Requirement The sbom tool's format parameter accepts only "json" or "html". It does not support XML. If the user does not specify a format, default to "html" (human-readable compliance report). Use "json" only when the user explicitly wants programmatic/machine analysis (e.g. feeding it to another tool). Generate SBOM Call the sbom tool with the app parameter and format set to "html" (default) or "json". Handle Execution Edge Cases Timeout warning: Generating an SBOM traverses the entire transitive dependency tree of a live process. The N|Solid server extends the timeout to 180 seconds.
More from this repo
ns-advanced-memory-leak-hunter
Performs an advanced N|Solid memory leak hunt comparing baseline vs peak heap evidence to isolate retained...
ns-analyze-asset
Analyzes an existing N|Solid diagnostic asset by asset ID or local asset path using asset-summary.
ns-analyze-event
Investigates an existing N|Solid event payload and correlates relevant MCP evidence.