{"id":"59437d69-254f-447e-8856-50d8d67a9d46","shortId":"35gp77","kind":"skill","title":"Trivy Container Vulnerability Scanner","tagline":"Automates Aqua Security Trivy scans against Docker images and OCI artifacts to detect CVEs, misconfigurations, and license violations. Integrates with Trivy's JSON/SARIF output for CI-gate decisions and generates remediation reports.","description":"# Trivy Container Vulnerability Scanner\n\nAutomates Aqua Security Trivy scans against Docker images and OCI artifacts to detect CVEs, misconfigurations, and license violations. Integrates with Trivy's JSON/SARIF output for CI-gate decisions and generates remediation reports.\n\n## Installation\n\nRequirements and caveats from upstream:\n- ![Docker Pulls][docker-pulls]\n- docker run aquasec/trivy\n- There are canary builds ([Docker Hub](https://hub.docker.com/r/aquasec/trivy/tags?page=1&name=canary), [GitHub](https://github.com/aquasecurity/trivy/pkgs/container/trivy/75776514?tag=canary), [ECR](https://gallery.ec...\n\nBasic usage or getting-started notes:\n- ### Get Trivy\n- Trivy is available in most common distribution channels. The full list of installation options is available in the [Installation] page. Here are a few popular examples:\n- brew install trivy\n\n- Source: https://github.com/aquasecurity/trivy\n- Extracted from upstream docs: https://raw.githubusercontent.com/aquasecurity/trivy/HEAD/README.md\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/trivy-container-vulnerability-scanner/)","tags":["trivy","container","vulnerability","scanner","skills","agentskillexchange","agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex"],"capabilities":["skill","source-agentskillexchange","skill-trivy-container-vulnerability-scanner","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/trivy-container-vulnerability-scanner","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,125 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:12:54.570Z","embedding":null,"createdAt":"2026-05-18T13:20:02.467Z","updatedAt":"2026-05-18T19:12:54.570Z","lastSeenAt":"2026-05-18T19:12:54.570Z","tsv":"'/aquasecurity/trivy':145 '/aquasecurity/trivy/head/readme.md':152 '/aquasecurity/trivy/pkgs/container/trivy/75776514?tag=canary),':101 '/r/aquasec/trivy/tags?page=1&name=canary),':97 '/skills/trivy-container-vulnerability-scanner/)':159 'agent':154 'agentskillexchange.com':158 'agentskillexchange.com/skills/trivy-container-vulnerability-scanner/)':157 'aqua':6,43 'aquasec/trivy':88 'artifact':15,52 'autom':5,42 'avail':115,128 'basic':104 'brew':139 'build':92 'canari':91 'caveat':78 'channel':120 'ci':31,68 'ci-gat':30,67 'common':118 'contain':2,39 'cves':18,55 'decis':33,70 'detect':17,54 'distribut':119 'doc':149 'docker':11,48,81,84,86,93 'docker-pul':83 'ecr':102 'exampl':138 'exchang':156 'extract':146 'full':122 'gallery.ec':103 'gate':32,69 'generat':35,72 'get':108,111 'getting-start':107 'github':98 'github.com':100,144 'github.com/aquasecurity/trivy':143 'github.com/aquasecurity/trivy/pkgs/container/trivy/75776514?tag=canary),':99 'hub':94 'hub.docker.com':96 'hub.docker.com/r/aquasec/trivy/tags?page=1&name=canary),':95 'imag':12,49 'instal':75,125,131,140 'integr':23,60 'json/sarif':27,64 'licens':21,58 'list':123 'misconfigur':19,56 'note':110 'oci':14,51 'option':126 'output':28,65 'page':132 'popular':137 'pull':82,85 'raw.githubusercontent.com':151 'raw.githubusercontent.com/aquasecurity/trivy/head/readme.md':150 'remedi':36,73 'report':37,74 'requir':76 'run':87 'scan':9,46 'scanner':4,41 'secur':7,44 'skill':155 'skill-trivy-container-vulnerability-scanner' 'sourc':142,153 'source-agentskillexchange' 'start':109 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'trivi':1,8,25,38,45,62,112,113,141 'upstream':80,148 'usag':105 'violat':22,59 'vulner':3,40","prices":[{"id":"2ed75860-8cd3-4dae-a3e3-6c14196f240e","listingId":"59437d69-254f-447e-8856-50d8d67a9d46","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:20:02.467Z"}],"sources":[{"listingId":"59437d69-254f-447e-8856-50d8d67a9d46","source":"github","sourceId":"agentskillexchange/skills/trivy-container-vulnerability-scanner","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/trivy-container-vulnerability-scanner","isPrimary":false,"firstSeenAt":"2026-05-18T13:20:02.467Z","lastSeenAt":"2026-05-18T19:12:54.570Z"}],"details":{"listingId":"59437d69-254f-447e-8856-50d8d67a9d46","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"trivy-container-vulnerability-scanner","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"5cb3c903eb2dfdeaa0b68ebd38932d731c139436","skill_md_path":"skills/trivy-container-vulnerability-scanner/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/trivy-container-vulnerability-scanner"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Trivy Container Vulnerability Scanner","description":"Automates Aqua Security Trivy scans against Docker images and OCI artifacts to detect CVEs, misconfigurations, and license violations. Integrates with Trivy's JSON/SARIF output for CI-gate decisions and generates remediation reports."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/trivy-container-vulnerability-scanner"},"updatedAt":"2026-05-18T19:12:54.570Z"}}