snyk-agent-scan-compliance

Restructure skill content to fix Snyk agent scanner alerts W001, W011, and W012.

178|15|Updated Mar 21, 2026
One-click install
npx skills add https://github.com/samber/cc-skills --skill snyk-agent-scan-compliance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: snyk-agent-scan-compliance
Source: https://github.com/samber/cc-skills/tree/main/skills/snyk-agent-scan-compliance
Command: npx skills add https://github.com/samber/cc-skills --skill snyk-agent-scan-compliance

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Skill provides a standardized approach to fixing Snyk agent scanner alerts (W001, W011, W012) by restructuring content in skills to avoid unsafe patterns while preserving all information.

Core Features & Use Cases

  • Enforces frontmatter-based installs to satisfy W012.
  • Removes explicit MCP tool names from body prose to satisfy W001.
  • Rewrites imperative external content references into passive or factual statements to satisfy W011.
  • Useful in CI pipelines, PR reviews, and manual skill authoring to ensure safety and compatibility across agents.

Quick Start

Run the snyk-agent-scan on this skill and apply passive rewrites to fix W001, W011, and W012 while preserving all information.

Frequently Asked Questions about snyk-agent-scan-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix Snyk agent scan alerts in skill markdown bodies?

Fix Snyk agent scan alerts by restructuring content without losing information—moving install commands to frontmatter and removing MCP tool names from prose to satisfy W001, W011, and W012.

What are Snyk W001, W011, and W012 compliance checks?

Snyk W001, W011, and W012 compliance checks flag unsafe patterns in skill bodies: explicit MCP tool names in prose, imperative external content references, and missing frontmatter-based installs.

How do I move install commands to frontmatter for W012 compliance?

Move install commands to frontmatter for W012 compliance by restructuring the skill body to enforce frontmatter-based installs while preserving all original information in the metadata.

Can I use this automated fix in CI pipelines and local triage?

Yes, this automated fix applies across CI pipelines, PR reviews, and local triage to ensure safety and compatibility across agents by enforcing safe reformulations for Snyk alerts.

How do I rewrite imperative external content references for W011 compliance?

Rewrite imperative external content references for W011 compliance by converting them into passive or factual statements, applying passive language guidelines while retaining the original meaning.

What are the limitations of automated Snyk alert remediation?

Automated Snyk alert remediation is limited to restructuring content for W001, W011, and W012 alerts; it focuses on moving installs to frontmatter and rewriting prose without losing information.