security-snapshot

Generate consolidated security snapshots from AWS Inspector V2 and GitHub alerts.

2|Updated Feb 23, 2026
One-click install
npx skills add https://github.com/MDGrey33/memnyx --skill security-snapshot-mdgrey33
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-snapshot
Source: https://github.com/MDGrey33/memnyx/tree/main/.claude/skills/security-snapshot
Command: npx skills add https://github.com/MDGrey33/memnyx --skill security-snapshot-mdgrey33

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires awscli, boto3, botocore, gh, and includes scripts (resource) components.

What problem does it solve?

This Skill turns scattered AWS Inspector V2 findings and GitHub security alerts into a single, repeatable security snapshot so teams can quickly see what is risky, what overlaps across sources, and what changed since the last run.

Core Features & Use Cases

  • Layered security analysis: Collects Inspector V2 posture data, GitHub Dependabot alerts, code scanning alerts, and secret scanning alerts.
  • Correlation and prioritization: Matches findings across sources, ranks top offenders, and highlights package quick wins and repo convergence.
  • Historical reporting: Saves dated snapshots and builds a dashboard for trend tracking and executive review.
  • Use cases: Monthly security reviews, on-demand org-wide vulnerability triage, remediation planning, and dashboard generation for leadership.

Quick Start

Run the security-snapshot workflow for your configured workspace to collect fresh security data, generate the latest dashboard, and preserve a dated snapshot for trend comparison.

Frequently Asked Questions about security-snapshot

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I consolidate AWS Inspector V2 findings and GitHub Dependabot alerts into one dashboard?

You can consolidate AWS Inspector V2 findings and GitHub alerts into one dashboard by collecting, correlating, and saving dated security snapshots. This unifies posture data, Dependabot, code scanning, and secret scanning alerts for centralized vulnerability triage and trend tracking.

Can I correlate GitHub security alerts with AWS Inspector vulnerabilities for repo prioritization?

Yes, you can correlate GitHub security alerts with AWS Inspector vulnerabilities for repo prioritization. The process matches findings across sources, ranks top offenders, and highlights package quick wins and repo convergence to streamline remediation planning.

What do I need to generate an organization-wide vulnerability triage report from AWS and GitHub?

To generate an organization-wide vulnerability triage report, you need authenticated AWS STS and Inspector2 access, GitHub CLI access, and local workspace configuration. These prerequisites enable collecting and correlating findings into a dated snapshot for executive review.

What is the best way to track security vulnerability trends across AWS and GitHub over time?

The best way to track security vulnerability trends across AWS and GitHub is by generating historical snapshots. Saving dated reports builds a dashboard that tracks remediation progress, monitors top offenders, and provides trend comparison for monthly security reviews.

Does this security snapshot approach work for monthly executive reporting?

Yes, this security snapshot approach works for monthly executive reporting. It generates a unified dashboard from AWS Inspector and GitHub alerts, highlighting risky overlaps, top offenders, and historical trend changes suitable for leadership review.

Why does my security snapshot require both AWS STS and GitHub CLI access?

Your security snapshot requires AWS STS and GitHub CLI access to authenticate and pull data from both platforms. AWS STS enables Inspector V2 posture data collection, while GitHub CLI retrieves Dependabot, code scanning, and secret scanning alerts for correlation.