vulnerability-scanning - Automated Security Vulnerability Scanning for Code and Dependencies
Performs automated security scanning for dependencies, code, and containers using various tools
Tags
Updated: 2026-02-11Capabilities
Typical Inputs
Typical Outputs
What this skill does
- scan container images
- scan dependencies
- scan filesystems
- run npm audit
- run Snyk tests
- run Trivy scans
Inputs
- source code
- container images
- package manifests
- Snyk API token
- npm package.json
Outputs
- vulnerability reports
- security alerts
- SBOM documents
- CVE lists
- compliance status
Requirements
- Trivy installation
- Snyk CLI
- npm/yarn environment
- Docker runtime
- CI/CD environment