Agent skill · security · secondsky
vulnerability-scanning
Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit. Use for CI/CD security gates, pre-deployment audits, compliance requirements, or encountering CVE detection, outdated packages, license compliance, SBOM generation errors.
Why this skill is useful
Adds executable scripts for vulnerability scanning across multiple tools that automate security checks not typically generated by the AI.
What it needs
Requires bandit, npm, snyk, trivy installed locally. Requires snyk account access. About 1k tokens when loaded. Last updated 2026-08-06. 204 stars on the source repository.
What this skill does
Vulnerability Scanning Automate security vulnerability detection across code, dependencies, and containers. Dependency Scanning Container Scanning (Trivy) GitHub Actions Integration Code Analysis (Bandit for Python) Node.js Scanner Best Practices Integrate scanning in CI/CD pipeline Fail builds on high/critical findings Scan dependencies and containers Track vulnerabilities over time Document accepted false positives Tools Trivy (containers, filesystem) Snyk (dependencies, code) npm audit / yarn audit Bandit (Python) OWASP Dependency-Check
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills secondsky/vulnerability-scanning