snyk-security

What problem does it solve?

This skill automates security vulnerability scanning and code quality checks across any project by integrating with Snyk's MCP server, enabling teams to identify and remediate risks early.

Core Features & Use Cases

• Enable MCP Server (REQUIRED FIRST STEP): Modify .factory/.mcp.json to set "snyk".disabled to false so the MCP server becomes available.
• Execute Scans: After enabling the MCP server, run the appropriate scans (code, SCA, IaC, container, or SBOM) based on detected project characteristics and collect results for remediation.
• Disable MCP Server (REQUIRED FINAL STEP): Reset "snyk".disabled to true to remove Snyk tools from context when not in use.
• Project Detection & Scanning: Automatically detect language/frameworks (e.g., C#/.NET, JavaScript, Python, Java, Go, Ruby, Rust, PHP) and infrastructure files, then apply the correct scan type.
• Universal Scans: Includes snyk_code_scan, snyk_sca_scan, snyk_iac_scan, snyk_container_scan, and snyk_sbom_scan for any project.
• Remediation Guidance: Aggregate findings by severity and provide actionable fixes and upgrade recommendations.
• Compatibility: Designed to integrate with Claude Code, Factory Droids, and other agents via the Skill framework.

Quick Start

Enable the MCP server, then run scans on your project and review results.