A collection of Snyk Studio suggested Rules, Commands, Hooks, and Directives
Skill Claude CodeCodex
Generate and analyze AI Bill of Materials (AIBOM) for Python projects using AI/ML components. Identifies AI models, datasets, tools, and frameworks for security and compliance tracking. Use this skill when: User asks to scan for AI components User wants to know what AI models a project uses User mentions "AI BOM", "AI…
Skill Claude CodeCodex
Comprehensive container image security scanning and remediation. Analyzes Docker images for OS package vulnerabilities, application dependencies, and Dockerfile best practices. Use when: User asks to scan a Docker image or container User mentions "container security" or "image vulnerabilities" User wants to secure a…
Skill Claude CodeCodex
Detect infrastructure drift between Terraform state and actual cloud resources. Identifies unmanaged resources, manual changes, and configuration drift. Use when: User asks to check for infrastructure drift User wants to find unmanaged cloud resources User mentions "drift detection" or "Terraform drift" User asks to…
Skill Claude CodeCodex
Infrastructure as Code security scanning for Terraform, Kubernetes, CloudFormation, and Azure ARM. Detects misconfigurations, security risks, and compliance violations before deployment. Use when: User asks to scan Terraform files or modules User mentions "infrastructure security" or "IaC scan" User is working with…
Skill Claude CodeCodex
Software Bill of Materials (SBOM) security analysis for vulnerability assessment and third-party risk management. Validates SBOMs from vendors or generates SBOMs for internal projects. Use this skill when: User asks to analyze an SBOM file User mentions "third-party risk" or "vendor security" User needs to validate a…
Skill Claude CodeCodex
Proactive security scanning for newly generated or modified code. Intelligently detects changes, runs appropriate scans (SAST, SCA, IaC), filters to only NEW issues, and prevents vulnerabilities at the source. Use this skill when: Agent generates new code files Agent modifies existing code User asks to "scan for…
Skill Claude CodeCodex
Helps choose secure, healthy open-source packages by evaluating vulnerability status, maintenance health, popularity, community, and security posture. Use this skill when: Agent needs to import a new dependency User asks "which package should I use for X?" User wants to compare packages (A vs B) User asks "is this…
Skill Claude CodeCodex
Complete security remediation workflow. Scans code for vulnerabilities using Snyk, fixes them, validates the fix, and optionally creates a PR. Supports both single-issue and batch mode for multiple vulnerabilities. Use this skill when: User asks to fix security vulnerabilities User mentions "snyk fix", "security fix"…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: