/vulnerability-scanning
Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit. Use for CI/CD security gates, pre-deployment audits, compliance requirements, or encountering CVE detection, outdated packages, license compliance, SBOM generation errors.
One skill from claude-skills.
shell
$ npx -y skills add secondsky/claude-skills --skill vulnerability-scanning --agent claude-codeInstalls just this skill. Get the whole plugin for auto-invocation.
How it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/vulnerability-scanning
Context preview
The summary Claude sees to decide when to auto-load this skill.
Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit. Use for CI/CD security gates, pre-deployment audits, compliance requirements, or encountering CVE detection, outdated packages, license compliance, SBOM generation errors.
Stats
Stars194
Forks29
LanguageTypeScript
LicenseMIT
Ships with claude-skills
SKILL.md
vulnerability-scanning.SKILL.md
--- name: vulnerability-scanning description: Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit. Use for CI/CD security gates, pre-deployment audits, compliance requirements, or encountering CVE detection, outdated packages, license compliance, SBOM generation errors. license: MIT metadata: keywords: "Trivy, Snyk, npm-audit, OWASP, dependency-scanning, CVE, security-vulnerabilities, outdated-packages, license-compliance, SCA, SBOM, container-scanning, image-scanning, security-gates, CI-CD-security, pre-deployment-audit, supply-chain-security, vulnerability-detection, security-compliance, Docker-scan, Grype, static-analysis, dependency-check" --- # Vulnerability Scanning Automate security vulnerability detection across code, dependencies, and containers. ## Dependency Scanning ```bash # npm audit npm audit --audit-level=high # Snyk snyk test --severity-threshold=high # Safety (Python) safety check --full-report ``` ## Container Scanning (Trivy) ```bash # Scan container image trivy image myapp:latest --severity HIGH,CRITICAL # Scan filesystem trivy fs --scanners vuln,secret .
