skills.rest
snyk
snykOFFICIAL
Explore all skills by this author →
WebsiteGitHub

snyk-fix

Scan code and dependencies for vulnerabilities, apply fixes, and create pull requests.

56|32|Updated Jan 8, 2026
Search Tags:#security#remediation#PR#SAST#SCA#snyk#code-fix
One-click install
npx skills add https://github.com/snyk/studio-recipes --skill snyk-fix
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: snyk-fix
Source: https://github.com/snyk/studio-recipes/tree/main/command_directives/synchronous_remediation/claude_code/skills/snyk-fix
Command: npx skills add https://github.com/snyk/studio-recipes --skill snyk-fix

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Snyk Fix skill automates the entire security remediation workflow: it scans code and dependencies for vulnerabilities, applies fixes, validates outcomes, and can create a PR to deliver the changes.

Core Features & Use Cases

  • Auto-detection and Fixing: Identifies and fixes vulnerabilities in code (SAST) and dependencies (SCA) in one workflow.
  • Validation & Safety: Re-scans after fixes to ensure issues are resolved, with optional safety checks and rollback notes.
  • PR Automation: Optionally creates a pull request to integrate fixes into the main branch.

Quick Start

Example command to activate the skill: "fix security vulnerabilities in my project" and let the skill run through scan → fix → validate → PR if enabled.

Frequently Asked Questions about snyk-fix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security vulnerability fixes and create a pull request?▼

Automating security vulnerability fixes involves scanning code and dependencies, applying patches, validating outcomes, and optionally creating a pull request to integrate changes into your main branch.

Do I need Snyk CLI installed to scan code and dependencies for vulnerabilities?▼

Yes, you need the Snyk CLI installed and authenticated to scan code and dependencies for vulnerabilities and apply fixes. Optionally, the GitHub CLI is required if you want to automate pull request creation.

Can I fix both SAST and SCA vulnerabilities in a single workflow?▼

Yes, you can fix both SAST and SCA vulnerabilities in a single workflow. The process identifies and patches vulnerabilities in your code and dependencies together, then re-scans to validate the fixes.

What is the best way to validate that applied security fixes resolved the vulnerabilities?▼

Validating applied security fixes requires re-scanning the code and dependencies after patches are applied. This ensures the vulnerabilities are resolved and includes optional safety checks with rollback notes.

Does the security remediation workflow support automatic rollback notes for failed fixes?▼

The security remediation workflow provides optional safety checks and rollback notes after re-scanning your code to ensure applied fixes are validated and issues are fully resolved.

Related Skills

Explore More Software Engineering Skills→
tile-aitile-ai
346

tilelang-github-operations

Install GitHub CLI and create pull requests via authenticated workflows.

Official
Advanced
lehalpaullehalpaul

prepare-pr

Rebase GitHub Pull Requests onto main and run automated gates.

Community
Advanced
arbazkhan971arbazkhan971
26

devsecops

Integrate security scanning into CI/CD pipelines with blocking gates.

Community
Advanced
cmaennercmaenner
5

code-review-security

Scan codebases for security vulnerabilities and dependency risks.

Community
Intermediate