skills.rest
dpalfery
dpalferyCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

snyk-security

Scan projects for security vulnerabilities and code quality issues via Snyk MCP server.

1|Updated Jul 21, 2025
Search Tags:#security#sast#iac#container#snyk#sca
One-click install
npx skills add https://github.com/dpalfery/motorcycle-rag-system --skill snyk-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: snyk-security
Source: https://github.com/dpalfery/motorcycle-rag-system/tree/main/.claude/skills/snyk-security
Command: npx skills add https://github.com/dpalfery/motorcycle-rag-system --skill snyk-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates security vulnerability scanning and code quality checks across any project by integrating with Snyk's MCP server, enabling teams to identify and remediate risks early.

Core Features & Use Cases

  • Enable MCP Server (REQUIRED FIRST STEP): Modify .factory/.mcp.json to set "snyk".disabled to false so the MCP server becomes available.
  • Execute Scans: After enabling the MCP server, run the appropriate scans (code, SCA, IaC, container, or SBOM) based on detected project characteristics and collect results for remediation.
  • Disable MCP Server (REQUIRED FINAL STEP): Reset "snyk".disabled to true to remove Snyk tools from context when not in use.
  • Project Detection & Scanning: Automatically detect language/frameworks (e.g., C#/.NET, JavaScript, Python, Java, Go, Ruby, Rust, PHP) and infrastructure files, then apply the correct scan type.
  • Universal Scans: Includes snyk_code_scan, snyk_sca_scan, snyk_iac_scan, snyk_container_scan, and snyk_sbom_scan for any project.
  • Remediation Guidance: Aggregate findings by severity and provide actionable fixes and upgrade recommendations.
  • Compatibility: Designed to integrate with Claude Code, Factory Droids, and other agents via the Skill framework.

Quick Start

Enable the MCP server, then run scans on your project and review results.

Frequently Asked Questions about snyk-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Snyk security scans for my codebase?▼

Automate Snyk security scans by enabling the Snyk MCP server, which detects your project type and applies the appropriate scan, then aggregates vulnerabilities and code quality issues for remediation.

What types of security vulnerabilities can Snyk scan for automatically?▼

Snyk scans for security vulnerabilities using SCA, SAST, IaC, container, and SBOM scans, automatically detecting project frameworks to apply the correct analysis and provide actionable fixes.

Does Snyk scanning support multiple programming languages and frameworks?▼

Snyk scanning supports multiple languages including C#/.NET, JavaScript, Python, Java, Go, Ruby, Rust, and PHP, automatically detecting the framework to execute the correct security scan.

How do I enable the Snyk MCP server to start running scans?▼

Enable the Snyk MCP server by modifying the .factory/.mcp.json file to set the disabled flag to false, making Snyk tools available before executing scans and disabling it afterward.

Can I integrate Snyk vulnerability scanning with Claude Code or Factory Droids?▼

Integrate Snyk vulnerability scanning with Claude Code, Factory Droids, and other agents via the Skill framework to automatically identify and remediate security risks across projects.

Why do I need to disable the Snyk MCP server after scanning?▼

Disable the Snyk MCP server after scanning by resetting the disabled flag to true, removing Snyk tools from context to prevent unnecessary resource consumption when scans are complete.

Related Skills

Explore More Software Engineering Skills→
karsteggkarstegg
1

Outlook Extractor

Extract Outlook emails, calendar events, and contacts via COM automation.

Community
Intermediate
bostonaholicbostonaholic
8

reviewing-security

Audit code changes for OWASP Top 10 vulnerabilities and severity.

Community
Intermediate
AreteDriverAreteDriver
4

cicd-pipeline

Implements CI/CD pipelines using Batcomputer for automated code review and deployment gating.

Community
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced