数据分析
AI runtime security monitoring — context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries. Use when the user mentions runtime monitoring, context graphs, lateral movement analysis, audit log correlation, or vulnerability analytics.
AI runtime security monitoring — context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries. Use when the user mentions runtime monitoring, context graphs, lateral movement analysis, audit log correlation, or vulnerability analytics.
Context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries.
pipx install agent-bom
| Tool | Description |
|---|---|
context_graph | Agent context graph with lateral movement analysis |
analytics_query | Query vulnerability trends, posture history, and runtime events |
runtime_correlate | Cross-reference runtime audit logs with CVE findings |
# Build context graph from scan results
context_graph()
# Correlate runtime audit with CVE data
runtime_correlate(audit_file="proxy-audit.jsonl")
# Query analytics
analytics_query(query="top_cves", days=30)
Operates on scan results already in memory and user-provided audit log files. No automatic file discovery. No network calls unless you configure an optional ClickHouse endpoint for persistent analytics.
MCP server security registry and trust assessment — look up servers in the 1059-entry server security metadata registry, run pre-install marketplace checks, batch fleet risk scoring, assess skill file trust, and run SAST code scans. Use when the user mentions MCP server trust, registry lookup, marketplace check, or skill trust assessment.
在本地运行 77 项安全测试,为 AI 代理签发证书并与其他受信代理完成握手。
为 AI 智能体提供带安全防护的持久化记忆：语义检索、写入时威胁过滤与可审计日志。
Two-pass code audits across security, perf, UX, DX, and edge.
集成公告源监控、签名校验与风险技能处置的 ClawSec 套装管理入口。
在安装或发布前，为待审查的 skill 包生成结构化风险报告。