Configure Snyk security integration for GitHub repositories via GitHub CLI.
npx skills add https://github.com/zcaceres/skills --skill security-snyk
Please help me install this Agent Skill. Skill: security-snyk Source: https://github.com/zcaceres/skills/tree/main/skills/security-snyk Command: npx skills add https://github.com/zcaceres/skills --skill security-snyk
This skill solves the common friction of correctly configuring Snyk for a repository, ensuring both the GitHub App integration and the project import are completed, while preventing the default behavior of flooding the repository with unsolicited fix PRs.
Invoke the security-snyk command to begin the guided setup and verification process for your current repository.
High-intent search queries and answers about installing and using this skill.
To set up Snyk vulnerability scanning, the skill orchestrates Snyk login, GitHub App installation, and project import. It uses GitHub CLI authentication and Snyk account access to verify installation status and scaffold CI workflows for your repository.
To stop Snyk from flooding your repository with unsolicited fix PRs, this skill automatically advises on disabling automatic fix PRs while keeping pull request security checks active. This reduces noise while maintaining vulnerability coverage.
Yes, you can add Snyk Code SAST tests to your CI workflow. The skill optionally scaffolds a pinned CI workflow to run SAST tests, filling the source-code analysis gap left by the Snyk free tier's dependency-only scanning.
Yes, GitHub CLI authentication is required to configure Snyk project imports. The setup process uses the GitHub API to confirm the Snyk App is correctly installed and scoped to your repository before completing the import.
The best way to verify Snyk App installation status is by using the GitHub API. This skill performs automated verification to confirm the Snyk App is correctly installed and scoped to your current repository during the guided setup process.
yanochka11Configure GitHub authentication using HTTPS tokens, SSH keys, or gh CLI.
hardw00tOrchestrate Semgrep, CodeQL, and Bandit scans across codebases.
DCx7C5Automate Snyk-based scans of package manifests and lockfiles in CI/CD pipelines.
icartshAnalyze .NET solutions for code quality, security, and dependency issues.
