bumblebee - Run Bumblebee supply-chain inventory and exposure scans.
Runs read-only inventory and exposure scans on macOS or Linux to detect compromised packages, extensions, and MCP host configurations.
Tags
Updated: 2026-09-22Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Verify Go installation and version
- Install Bumblebee CLI binary
- Run Bumblebee scan profiles
- Generate Markdown report from NDJSON
- Summarize scan findings and diagnostics
Inputs
- Scan profile selection
- Target directory paths
- Exposure catalog file
- Ecosystem filter list
Outputs
- Raw NDJSON records file
- Markdown summary report file
- Diagnostic log file
- Chat summary of scan findings
Requirements
- macOS or Linux operating system
- Go version 1.25 or higher
- Python 3 runtime
- Non-elevated user permissions