Snyk Agent Scan Compliance

If you're authoring or maintaining Claude Code skills and running into snyk-agent-scan failures, this is your compliance fixer. It handles the three main alert types: W011 (third-party content exposure), W012 (malicious external URLs), and W001 (prompt injection via MCP tool calls). The approach is solid: restructure content to pass the scan without deleting anything useful. It won't help with dependency vulnerabilities or container issues, just the agent scanner. What stands out is the methodical fix-one-rerun workflow and the emphasis on passive voice over imperatives, which keeps skills safe without neutering them. Good for unblocking PRs when CI fails on scanner alerts.

Install to Claude Code

npx -y skills add samber/cc-skills --skill snyk-agent-scan-compliance --agent claude-code