skills.rest
lauhon
lauhonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-posture-management

Query Datadog CSPM vulnerabilities, security findings, SBOMs, and CSM coverage via the pup CLI.

5|2|Updated Mar 9, 2026
Search Tags:#vulnerability management#cloud security#datadog#sbom#security findings#cspm#csm coverage
One-click install
npx skills add https://github.com/lauhon/pi --skill security-posture-management-lauhon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-posture-management
Source: https://github.com/lauhon/pi/tree/main/skills/security-posture-management
Command: npx skills add https://github.com/lauhon/pi --skill security-posture-management-lauhon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security teams struggle to get a unified view of vulnerabilities, misconfigurations, and software dependencies scattered across cloud accounts, hosts, containers, and services. This Skill lets you query Datadog's Cloud Security Posture Management APIs through natural language to assess risk and track remediation. ## Core Features & Use Cases - Vulnerability Management: List and filter vulnerabilities by severity, detection tool (IAST, SCA, SAST, Infra), exploitability, and production exposure. - Security Findings: Query misconfigurations, identity risks, attack paths, and API security issues, with support for muting findings with justification. - SBOM Analysis: Generate and filter Software Bills of Materials for repositories, services, hosts, and container images by package, version, or license. - CSM Coverage Monitoring: Measure Cloud Security Management coverage across cloud accounts, hosts, containers, and serverless resources. - Use Case: Ask "Show me all critical vulnerabilities in production with public exploits" and get a prioritized list of exploitable issues affecting live assets, ready for remediation triage. ## Quick Start Ask the agent to list all critical open vulnerabilities in production assets using your configured Datadog API credentials.

Frequently Asked Questions about security-posture-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I list critical vulnerabilities in Datadog CSPM?▼

Run pup vulnerabilities list with the filter cvss.datadog.severity=Critical to return only critical findings. You can combine filters, such as asset.risks.in_production=true, to narrow results to production assets.

How do I generate an SBOM for a container image in Datadog?▼

Use pup sbom get with asset-type=Image, the image name, and optionally the repo digest. The output supports CycloneDX and SPDX formats for supply chain and license analysis.

What permissions are required for Datadog vulnerability management APIs?▼

Reading vulnerabilities and assets requires appsec_vm_read, while reading findings requires security_monitoring_findings_read. Muting or unmuting findings additionally requires security_monitoring_findings_write.

Can I mute Datadog security findings with a justification?▼

Yes, findings can be muted with reasons such as PENDING_FIX, FALSE_POSITIVE, ACCEPTED_RISK, or OTHER. These write operations require explicit user confirmation and the findings write permission.

Why does the Datadog security API return a permission denied error?▼

Permission denied errors mean your API and application keys lack scopes like appsec_vm_read, or your organization has not enabled CSM or Vulnerability Management. Verify the DD_API_KEY, DD_APP_KEY, and DD_SITE environment variables and org feature access.

Related Skills

Explore More Software Engineering Skills→
alexmaruccialexmarucci

security-posture-management

Manage cloud security posture via Datadog CSPM, Vulnerability Management, and Security Findings APIs.

Community
Advanced
djwmobleydjwmobley

remediation

Parse pipeline findings into uniform remediation records and tracked tickets.

Community
Advanced
AI-Foundry-CoreAI-Foundry-Core
4

python-observability

Configure structured logging, metrics, and tracing for Python applications with OpenTelemetry.

Official
Advanced
alexmaruccialexmarucci

cloud-workload-security

Manage cloud workload security threats and protection policies via Datadog CSM API.

Community
Advanced