domains / families / general / bumblebee

bumblebee

authentic

Run Bumblebee supply-chain inventory and exposure scans on macOS/Linux to detect compromised packages, extensions, and MCP host configs.

When to use

• Use this skill when an advisory, incident report, or exposure catalog names compromised packages, developer tools, browser/editor extensions, or MCP host configuration that may exist on a local macOS or Linux developer endpoint. Use it for…

When not to use

• This skill only reports local inventory and exposure matches; it does not remediate affected packages, extensions, or configs.
• Scan coverage depends on Bumblebee's supported ecosystems, the selected roots, and the current user's filesystem permissions.
• Results are point-in-time evidence and should be re-run after package installs, dependency updates, or incident-response changes.

Skill page

Source