skills.rest
nodesource
nodesourceOFFICIAL
Explore all skills by this author →
Website𝕏@NodeSourceGitHub

ns-generate-sbom

Generates a Software Bill of Materials for N|Solid Node.js applications in HTML or JSON format.

6|7|Updated Jun 4, 2026
Search Tags:#compliance#nodejs#generate#sbom#license audit#dependency inventory#nsolid
One-click install
npx skills add https://github.com/nodesource/nsolid-plugin --skill ns-generate-sbom-nodesource
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ns-generate-sbom
Source: https://github.com/nodesource/nsolid-plugin/tree/main/skills/ns-generate-sbom
Command: npx skills add https://github.com/nodesource/nsolid-plugin --skill ns-generate-sbom-nodesource

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Producing a Software Bill of Materials for a running Node.js application normally requires manual dependency tree analysis, which is slow and error-prone. This Skill generates a complete SBOM directly from a live N|Solid-monitored application for compliance reviews, license audits, and vendor assessments. ## Core Features & Use Cases - SBOM Generation: Calls the N|Solid sbom tool against a connected application to traverse its full transitive dependency tree. - Format Selection: Outputs human-readable HTML compliance reports by default, or JSON for programmatic consumption. - File Output: Saves results directly to .nsolid/sbom/ with a summary of total packages, top licenses, and notable dependencies. - Use Case: A security team preparing for a SOC2 audit asks for a dependency inventory of the production API; the Skill generates an HTML SBOM report and saves it to .nsolid/sbom/api_sbom.html. ## Quick Start Generate an HTML SBOM for my N|Solid app named orders-api and save it to the .nsolid/sbom folder.

Frequently Asked Questions about ns-generate-sbom

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate an SBOM for a Node.js application?▼

Use the N|Solid sbom tool with the target app name to generate a Software Bill of Materials from the live process. The output defaults to a human-readable HTML report, or JSON if you need machine-readable output.

What SBOM formats does N|Solid support?▼

The N|Solid sbom tool supports only HTML and JSON output formats. XML is not supported; HTML is the default for compliance reports, while JSON suits programmatic analysis or feeding into other tools.

Why does SBOM generation time out or take so long?▼

SBOM generation traverses the entire transitive dependency tree of a live process, so the N|Solid server extends its timeout to 180 seconds. If your MCP client disconnects at 60 seconds, the server is still processing; adjust the client timeout instead of retrying immediately.

Can I generate an SBOM without knowing the app name?▼

Yes, call the information-dashboard tool with no parameters to list all connected agents and their app names first. Avoid using global-filter for this lookup since it returns an excessively large response.

Where are generated SBOM files saved?▼

Generated SBOMs are written directly to the .nsolid/sbom/ directory, created if missing, using the naming pattern <appName>_sbom.html or <appName>_sbom.json. Files are not staged in temporary directories.

Related Skills

Explore More Software Engineering Skills→
jerelvelardejerelvelarde
6

analyze-metrics

Analyze product metrics against targets and generate a structured metrics review file.

Community
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

phase-2-automation-weeks-5-8

Automate CI/CD gate enforcement, SBOM generation, vulnerability scanning, and SLSA provenance.

Official
Advanced
arcasilesgrouparcasilesgroup
54

ai-security

Run unified security scans for SAST, DAST, dependencies, and SBOM generation.

Official
Advanced
vecearvecear

artifact-sbom-publisher

no

Community
Advanced