security-scan
Resolve npm dependency vulnerabilities detected by security scans.
Install
mkdir -p .claude/skills/security-scan && curl -L -o skill.zip "https://mcp.directory/api/skills/download/4566" && unzip -o skill.zip -d .claude/skills/security-scan && rm skill.zipInstalls to .claude/skills/security-scan
About this skill
Security Scan
Resolve npm dependency vulnerabilities detected by Snyk.io security scans.
Activation Conditions
- User shares Snyk vulnerability reports
- Mentions CVEs/CWEs
- Asks to fix security issues in npm dependencies
Quick Reference
| Action | Rule |
|---|---|
| Fix direct deps | vuln-direct-deps.md |
| Fix transitive deps | vuln-transitive-deps.md |
Workflow
1. Assess
- Parse vulnerability report: package, version, CVE/CWE, severity, fixed version
- Categorize as direct (in package.json) or transitive (pulled in by another package)
2. Explore
- Check
package.jsonfor current versions and existing overrides - Check lockfile for actual resolved versions
- Search source code for direct usage of vulnerable package
- Check npm registry for available fixed versions:
npm view <package> versions --json
3. Fix
See rules for specific fix patterns.
4. Verify
bun i --yarn
bun run type:check
bun run lint
bun run build
bun run test
All must pass.
Tips
- Use exact versions for security fixes (no
^prefix) - Fix Critical/High severity first
- Replace unmaintained packages rather than patching
- Document workarounds with comments explaining why
Rules
See rules/ directory for detailed guidance.
More by redpanda-data
View all skills by redpanda-data →You might also like
flutter-development
aj-geddes
Build beautiful cross-platform mobile apps with Flutter and Dart. Covers widgets, state management with Provider/BLoC, navigation, API integration, and material design.
ui-ux-pro-max
nextlevelbuilder
"UI/UX design intelligence. 50 styles, 21 palettes, 50 font pairings, 20 charts, 8 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, mobile app, .html, .tsx, .vue, .svelte. Elements: button, modal, navbar, sidebar, card, table, form, chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, flat design. Topics: color palette, accessibility, animation, layout, typography, font pairing, spacing, hover, shadow, gradient."
drawio-diagrams-enhanced
jgtolentino
Create professional draw.io (diagrams.net) diagrams in XML format (.drawio files) with integrated PMP/PMBOK methodologies, extensive visual asset libraries, and industry-standard professional templates. Use this skill when users ask to create flowcharts, swimlane diagrams, cross-functional flowcharts, org charts, network diagrams, UML diagrams, BPMN, project management diagrams (WBS, Gantt, PERT, RACI), risk matrices, stakeholder maps, or any other visual diagram in draw.io format. This skill includes access to custom shape libraries for icons, clipart, and professional symbols.
godot
bfollington
This skill should be used when working on Godot Engine projects. It provides specialized knowledge of Godot's file formats (.gd, .tscn, .tres), architecture patterns (component-based, signal-driven, resource-based), common pitfalls, validation tools, code templates, and CLI workflows. The `godot` command is available for running the game, validating scripts, importing resources, and exporting builds. Use this skill for tasks involving Godot game development, debugging scene/resource files, implementing game systems, or creating new Godot components.
nano-banana-pro
garg-aayush
Generate and edit images using Google's Nano Banana Pro (Gemini 3 Pro Image) API. Use when the user asks to generate, create, edit, modify, change, alter, or update images. Also use when user references an existing image file and asks to modify it in any way (e.g., "modify this image", "change the background", "replace X with Y"). Supports both text-to-image generation and image-to-image editing with configurable resolution (1K default, 2K, or 4K for high resolution). DO NOT read the image file first - use this skill directly with the --input-image parameter.
pdf-to-markdown
aliceisjustplaying
Convert entire PDF documents to clean, structured Markdown for full context loading. Use this skill when the user wants to extract ALL text from a PDF into context (not grep/search), when discussing or analyzing PDF content in full, when the user mentions "load the whole PDF", "bring the PDF into context", "read the entire PDF", or when partial extraction/grepping would miss important context. This is the preferred method for PDF text extraction over page-by-page or grep approaches.
Related MCP Servers
Browse all servers
Security ScannerUse our Security Scanner as a website virus scanner to detect site scanner virus threats, vulnerabilities, and exposed s
Security ScannerSecurity Scanner analyzes code repositories to find exposed secrets, vulnerabilities, dependency flaws and misconfigurat
Snyk Agent ScanSecurity scanner for AI agents, MCP servers, and agent skills. Automatically scan code for vulnerabilities, license issu
SemgrepSemgrep is a leading code analysis tool that scans code for vulnerabilities, helping developers fix issues swiftly withi
CrowdStrike FalconConnect with CrowdStrike Falcon, a leading endpoint protection platform, for intelligent security analysis and advanced
Socket SecuritySocket Security integrates with Socket's API to analyze npm and PyPI packages for detailed vulnerability and quality met
Stay ahead of the MCP ecosystem
Get weekly updates on new skills and servers.