← Back to Skills Marketplace
138
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install snyk-vulnerability-scanner
Description
Automates Snyk security vulnerability scanning, GitHub issue reporting, and auto-fix PR creation for repositories. Use when scanning repositories for securit...
Usage Guidance
This skill appears to do exactly what it claims: run Snyk scans, create GitHub issues, and open auto-fix PRs. Before using it: (1) ensure you have the Snyk CLI and GitHub CLI installed and authenticated locally (gh auth, snyk auth); (2) run with dry-run first to inspect what changes would be made; (3) note the scripts clone and push branches—only use with repos you trust and where the auth tokens have minimal necessary scope (repo write only); (4) review the included scripts for any policy you want to enforce (commit author/email, branch names, labels); and (5) if you plan to schedule automated runs, restrict which repo URLs the cron job uses and monitor generated PRs/issues.
Capability Analysis
Type: OpenClaw Skill
Name: snyk-vulnerability-scanner
Version: 1.0.0
The skill bundle provides a legitimate automation workflow for Snyk security scanning and GitHub issue/PR management. It utilizes the Snyk CLI and GitHub CLI (`gh`) to perform its stated functions, with logic distributed across bash scripts (`snyk-scan.sh`, `snyk-auto-fix.sh`) and a Python script (`create-github-issues.py`). No evidence of data exfiltration, unauthorized access, or malicious intent was found; the code follows standard practices for repository manipulation and reporting.
Capability Assessment
Purpose & Capability
Name/description match the included scripts: scanning with Snyk, creating issues via gh, and creating PRs after applying fixes. The files and runtime requirements are proportional and expected for this functionality.
Instruction Scope
SKILL.md and the scripts limit actions to cloning the target repo, running snyk, creating GitHub issues, and creating/pushing a fix branch/PR. The scripts reference only expected CLIs (git, snyk, gh, jq, python3) and temporary paths; they do not read unrelated system files or post data to unknown endpoints.
Install Mechanism
No install spec is provided (instruction-only install), and the code files are standard scripts. Nothing is downloaded from arbitrary URLs or written into unusual system locations.
Credentials
The skill does not declare environment variables but requires local CLI authentication for Snyk and GitHub and expects git credentials / repo write access. This is coherent with the purpose, but users must supply and manage credentials (gh auth, snyk auth, or git remote credentials) outside the skill; ensure those credentials have appropriate scopes.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system-wide agent settings. It will create branches/PRs and push to origin (requires repository write access), which is expected behavior for auto-fix functionality.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install snyk-vulnerability-scanner - After installation, invoke the skill by name or use
/snyk-vulnerability-scanner - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the Snyk Vulnerability Scanner skill.
- Automates Snyk scanning, GitHub issue creation, and auto-fix pull request generation.
- Supports npm, Python, Gradle, and Maven repositories.
- Main workflow: scan repository → report as GitHub issues → apply fixes and create PRs.
- Configurable severity filters and PR target branch; includes dry-run and granular script options.
- Prevents duplicate issue creation and provides troubleshooting guidance.
Metadata
Frequently Asked Questions
What is Snyk Vulnerability Scanner?
Automates Snyk security vulnerability scanning, GitHub issue reporting, and auto-fix PR creation for repositories. Use when scanning repositories for securit... It is an AI Agent Skill for Claude Code / OpenClaw, with 138 downloads so far.
How do I install Snyk Vulnerability Scanner?
Run "/install snyk-vulnerability-scanner" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Snyk Vulnerability Scanner free?
Yes, Snyk Vulnerability Scanner is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Snyk Vulnerability Scanner support?
Snyk Vulnerability Scanner is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Snyk Vulnerability Scanner?
It is built and maintained by Cr0m3 (@cr0m3); the current version is v1.0.0.
More Skills