{
  "id": "skill-area:SBOM-management",
  "_kind": "SkillArea",
  "_file": "domain/skill-areas/skill-areas-expanded.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "SBOM Management",
    "description": "Software Bill of Materials lifecycle — SPDX/CycloneDX generation,\ningestion into vulnerability management systems, license\ncompliance scanning, and regulatory reporting automation.\n",
    "expertiseLevels": [
      "intermediate",
      "expert"
    ]
  },
  "outgoingEdges": [
    {
      "from": "skill-area:SBOM-management",
      "to": "specialization:security-research",
      "kind": "applies_to",
      "attributes": {
        "confidence": "primary"
      }
    },
    {
      "from": "skill-area:SBOM-management",
      "to": "domain:security",
      "kind": "applies_to",
      "attributes": {
        "confidence": "secondary"
      }
    },
    {
      "from": "skill-area:SBOM-management",
      "to": "skill-area:supply-chain-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:SBOM-management",
      "to": "skill-area:dependency-vulnerability-mgmt",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "helpful"
      }
    }
  ],
  "incomingEdges": [
    {
      "from": "skill-area:dependency-management",
      "to": "skill-area:SBOM-management",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "helpful"
      }
    },
    {
      "from": "responsibility:supply-chain-integrity",
      "to": "skill-area:SBOM-management",
      "kind": "requires_expertise",
      "attributes": {}
    }
  ]
}