enhance: refined diagrams, agent-bom CI, updated README

.github/workflows/ci.yml

@@ -8,6 +8,7 @@ on:
 
 permissions:
   contents: read
+  security-events: write
 
 jobs:
   lint:
@@ -58,6 +59,46 @@ jobs:
       - working-directory: skills/gpu-cluster-security
         run: pytest tests/ -v -o "testpaths=tests"
 
+  agent-bom-scan:
+    runs-on: ubuntu-latest
+    needs: lint
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - run: pip install agent-bom
+      - name: Scan skills source code
+        run: agent-bom code skills/ -f json -o agent-bom-results.json --fail-on-severity critical || true
+      - name: Upload results
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: agent-bom-scan-results
+          path: agent-bom-results.json
+          if-no-files-found: ignore
+
+  agent-bom-skills-audit:
+    runs-on: ubuntu-latest
+    needs: lint
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - run: pip install agent-bom
+      - name: Audit skill definitions
+        run: agent-bom skills scan skills/ -f json -o skills-audit.json || true
+      - name: Upload results
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: agent-bom-skills-audit
+          path: skills-audit.json
+          if-no-files-found: ignore
+
   validate-cloudformation:
     runs-on: ubuntu-latest
     needs: lint