About

Imported from terminalskills/skills (skills/snyk/SKILL.md). Install upstream with npx skills add terminalskills/skills --skill snyk. Copyright stays with the author (Apache-2.0).

Snyk

Name: snyk
Author: terminalskills

Overview

Snyk finds and fixes vulnerabilities in open-source dependencies, container images, IaC configs, and code. Integrates into CLI, CI/CD, Git repos, and IDEs.

Instructions

Step 1: Setup

npm install -g snyk
snyk auth

Step 2: Scan Dependencies

snyk test                    # test for vulnerabilities
snyk monitor                 # continuous monitoring
snyk fix                     # auto-fix vulnerabilities

Step 3: Container Scanning

snyk container test node:20-alpine
snyk container test my-app:latest --file=Dockerfile

Step 4: IaC Scanning

snyk iac test                # scan Terraform, K8s manifests
snyk iac test --report       # upload to dashboard

Guidelines

Free tier: 200 dependency tests/month, unlimited container tests.
Use --severity-threshold=high in CI to fail only on critical issues.
snyk fix auto-generates PRs with dependency upgrades.
Alternatives: npm audit (basic), GitHub Dependabot (free), Socket.dev (supply chain).

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/terminalskills-skills-snyk/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

terminalskills-skills-snyk.ocm.jsonjson

{
  "ocm": "1",
  "id": "terminalskills-skills-snyk",
  "kind": "skill",
  "name": "snyk",
  "description": "Find and fix vulnerabilities in code and dependencies with Snyk. Use when a user asks to scan for security vulnerabilities, audit npm packages, check Docker images for CVEs, or integrate security into CI/CD.",
  "publisher": "terminalskills",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "coding"
    ],
    "tags": [
      "skill-md",
      "snyk",
      "vulnerability",
      "dependencies",
      "docker",
      "ci-cd",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Find and fix vulnerabilities in code and dependencies with Snyk. Use when a user asks to scan for security vulnerabilities, audit npm packages, check Docker images for CVEs, or integrate security into CI/CD."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/terminalskills/skills",
      "path": "skills/snyk/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/terminalskills/skills/blob/HEAD/skills/snyk/SKILL.md",
      "key": "terminalskills/skills/skills/snyk/SKILL.md"
    },
    "compatibility": "Node.js, Python, Go, Java, Docker, IaC",
    "license": "Apache-2.0"
  },
  "instructions": "# Snyk\n\n## Overview\n\nSnyk finds and fixes vulnerabilities in open-source dependencies, container images, IaC configs, and code. Integrates into CLI, CI/CD, Git repos, and IDEs.\n\n## Instructions\n\n### Step 1: Setup\n\n```bash\nnpm install -g snyk\nsnyk auth\n```\n\n### Step 2: Scan Dependencies\n\n```bash\nsnyk test                    # test for vulnerabilities\nsnyk monitor                 # continuous monitoring\nsnyk fix                     # auto-fix vulnerabilities\n```\n\n### Step 3: Container Scanning\n\n```bash\nsnyk container test node:20-alpine\nsnyk container test my-app:latest --file=Dockerfile\n```\n\n##",
  "cost": {
    "context_tokens": 262
  }
}

Fetch it by URL: GET /api/v1/registry/terminalskills-skills-snyk/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.