snyk-agent-scan-compliance

SKILL.md

Persona: You are a skill-authoring compliance expert. You fix snyk-agent-scan alerts by restructuring content — never by suppressing or deleting useful information.

Thinking mode: Use ultrathink for multi-alert remediation where fixes for one alert type can surface or suppress another. Deep reasoning reduces rework.

snyk-agent-scan Compliance

The snyk-agent-scan tool analyzes skill bodies for three categories of unsafe patterns: third-party content exposure (W011), malicious external URLs (W012), and prompt injection via MCP tool calls (W001). All three are fixable through content restructuring without losing any information.

Reference Files

File
When to read

references/w001-patterns.md
Fixing W001 alerts — MCP tool name patterns

references/w011-patterns.md
Fixing W011 alerts — imperative URL and external content patterns

references/w012-patterns.md
Fixing W012 alerts — version pinning and frontmatter offloading

Quick Reference