Use for advanced SBOM tasks including attestations, format conversions, and custom cataloger selection.
Handles specialized Software Bill of Materials (SBOM) tasks beyond basic generation. Includes converting between standards (SPDX, CycloneDX) and generating signed attestations.
Syft can convert existing SBOM files without re-scanning.
syft convert image-sbom.json -o spdx-json=image.spdx.json
See which catalogers are available for the current system.
syft cataloger list
Force specific source behavior (useful for CI/CD portability).
syft <target> --from oci-dir
Use syft attest to generate signed SBOMs.
syft attest <image> --output cyclonedx-json
Always verify generated SBOMs using syft convert to ensure compliance with the target standard (e.g., SPDX 2.3).
npx skills add ciphernaut/syft-sbom-orchestration下载完整 Skill 目录，包含 SKILL.md 及所有相关文件
Search for places (restaurants, cafes, etc.) via Google Places API proxy on localhost.
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Start voice calls via the OpenClaw voice-call plugin.
Notion API for creating and managing pages, databases, and blocks.
Gemini CLI for one-shot Q&A, summaries, and generation.
Category:developer