discover-ai-bom

Generate a deterministic, CycloneDX-aligned AI BOM from point-in-time AI asset inventory snapshots. Supports normalized multi-cloud inventory documents plus provider-shaped snapshots for AWS SageMaker and Bedrock, Google Vertex AI, and Azure Machine Learning. Use when the user mentions AI BOM, model inventory, AI asset discovery, evidence collection for AI systems, PCI / SOC 2 technical evidence, or wants a portable bill of materials for models, endpoints, datasets, vector stores, runtimes, and guardrails. Do NOT use on raw cloud audit logs or OCSF findings — this skill expects asset inventory, not events. Do NOT use as a live monitor or to claim compliance by itself — it produces a point-in-time inventory artifact and never mutates cloud state.