Snyk Vulnerability Scanner Agent

Uses Snyk REST API v1 to scan project dependencies for known CVEs and license compliance issues. Integrates with Snyk Test endpoint for real-time SBOM analysis and generates CVSS-scored vulnerability reports with remediation paths.

Installation

Requirements and caveats from upstream:

• To use the CLI, you must install it and authenticate your machine. See Install or update the Snyk CLI and [Authenticate the CLI with your account](https:...
• Before you can use the CLI for Open Source scanning, you must install your package manager. The needed third-party tools, such as Gradle or Maven, must be in the PATH.
• Before using the Snyk CLI to test your Open Source Project for vulnerabilities, with limited exceptions, you must build your Project. For details, see [Open Source Projects that must be built before testing](https://d...

Basic usage or getting-started notes:

• Introduction to the Snyk CLI

• Snyk is a developer-first, cloud-native security tool to scan and monitor your software development projects for security vulnerabilities. Snyk scans multiple content types for security issues:

• Snyk Open Source: Find and automatically fix open-source vulnerabilities

• Source: https://github.com/snyk/cli

• Extracted from upstream docs: https://raw.githubusercontent.com/snyk/cli/HEAD/README.md

Source

• Agent Skill Exchange