← 返回 Skills 市场
nexecuteinc

CMDB Compass

作者 nexecute · GitHub ↗ · v1.0.6 · MIT-0
cross-platform ⚠ suspicious
358
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install cmdbcompass
功能描述
The first CMDB governance skill for ServiceNow. Audit, remediate, and govern your CMDB from any AI agent. Health scoring, duplicate detection, relationship a...
使用说明 (SKILL.md)

CMDB Compass

The first CMDB governance skill for ServiceNow.

Audit, remediate, and govern your ServiceNow CMDB from any AI agent. Health scoring, duplicate detection, relationship analysis, stale CI cleanup, and governed remediation with full rollback and audit trail on every write.

Install

clawhub install cmdbcompass

Or manually:

git clone https://github.com/cmdbcompass/cmdbcompass
cd cmdbcompass
bash scripts/install-mcp.sh

Configure

Add to your MCP client config:

{
  "mcpServers": {
    "cmdb-compass": {
      "command": "python",
      "args": ["-m", "servicenow_mcp.server"],
      "env": {
        "SERVICENOW_INSTANCE_URL": "https://your-instance.service-now.com",
        "SERVICENOW_USERNAME": "your_username",
        "SERVICENOW_PASSWORD": "your_password"
      }
    }
  }
}

Works with Claude Desktop, Cursor, VS Code, or any MCP-compatible client.

Capabilities

Audit tools cover health scoring, duplicate detection, relationship integrity, discovery gaps, stale CI identification, and CSDM 5.0 compliance. All audit operations are read-only and unlimited.

Write operations including merging duplicates, retiring stale CIs, bulk field updates, and relationship healing create an immutable audit trail and can be fully rolled back by session.

Requirements

Python 3.10+ and a ServiceNow instance with REST API access.

License

MIT. See LICENSE for details.

Contact

[email protected] · Issues

安全使用建议
This skill appears coherent with its stated purpose, but take standard precautions before installing third-party packages: 1) Verify the cmdb-compass PyPI project and associated GitHub repo/maintainers (look for recent activity, vetted owners). 2) Inspect the package source (or run pip install in an isolated environment) because Python packages execute code at install/import. 3) Use a least-privilege ServiceNow account (service account) for the credentials and rotate them if you stop using the skill. 4) If you need higher assurance, review the package code on GitHub or run the MCP server in a restricted host/container rather than on a broadly accessible machine.
功能分析
Type: OpenClaw Skill Name: cmdbcompass Version: 1.0.6 The skill provides ServiceNow CMDB governance tools but involves high-risk behaviors, including the handling of administrative credentials (SERVICENOW_PASSWORD) and the execution of a shell script (scripts/install-mcp.sh) that performs a remote package installation via pip (cmdb-compass). While these actions are plausibly required for the skill's stated purpose, the combination of sensitive credential requirements and external code execution during installation constitutes a significant attack surface.
能力评估
Purpose & Capability
The name/description (ServiceNow CMDB governance) matches the declared requirements: python/pip and ServiceNow instance credentials. Required binaries and env vars are appropriate for a Python-based ServiceNow client.
Instruction Scope
SKILL.md instructs installing the MCP server, configuring an MCP client with the ServiceNow URL/username/password, and running the Python module. It does not instruct reading unrelated files, exfiltrating data, or contacting unexpected endpoints beyond referenced GitHub/PyPI.
Install Mechanism
Install is via a local script that runs 'pip install cmdb-compass' from PyPI. Installing from PyPI is a standard but higher-trust step than instruction-only skills because package code runs at install / on import. The script does not download from unknown URLs, but installing third-party packages carries the usual supply-chain risk.
Credentials
The skill requires only SERVICENOW_INSTANCE_URL, SERVICENOW_USERNAME, and SERVICENOW_PASSWORD — all directly necessary to access ServiceNow REST APIs. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false and the skill does not request system-wide config changes. It asks the user to store credentials in the MCP client config (local), which is consistent with its operation and does not appear to grant elevated platform privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install cmdbcompass
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /cmdbcompass 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.6
Fixed metadata: declared required env vars, aligned all repo URLs, cleaned README
v1.0.5
Clean republish to clear duplicate flag
v1.0.4
Clean publish - removed duplicate flag
v1.0.3
- Added required environment variable definitions (SERVICENOW_INSTANCE_URL, SERVICENOW_USERNAME, SERVICENOW_PASSWORD) to metadata in SKILL.md. - No changes to feature set, installation, or usage instructions.
v1.0.2
- Fixed install instructions to use the correct package name: cmdbcompass instead of cmdb-compass. - No functional changes; documentation updated only.
v1.0.1
Improved install script transparency for security scan
v1.0.0
Initial release of cmdb-compass – the first CMDB governance skill for ServiceNow. - Enables CMDB auditing, remediation, and governance via any MCP-compatible client. - Features include health scoring, duplicate detection, relationship analysis, stale CI cleanup, and CSDM 5.0 compliance checks. - Supports governed remediation with full rollback and an audit trail for every write operation. - Easy installation and configuration with provided scripts and setup instructions. - Requires Python 3.10+ and a ServiceNow instance with REST API access.
元数据
Slug cmdbcompass
版本 1.0.6
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 7
常见问题

CMDB Compass 是什么?

The first CMDB governance skill for ServiceNow. Audit, remediate, and govern your CMDB from any AI agent. Health scoring, duplicate detection, relationship a... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 358 次。

如何安装 CMDB Compass?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install cmdbcompass」即可一键安装,无需额外配置。

CMDB Compass 是免费的吗?

是的,CMDB Compass 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

CMDB Compass 支持哪些平台?

CMDB Compass 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 CMDB Compass?

由 nexecute(@nexecuteinc)开发并维护,当前版本 v1.0.6。

💬 留言讨论