snyk-agent-scan-compliancev1.1.0

An AI agent developer writing a new Claude Code skill runs snyk-agent-scan locally before publishing to catch W001, W011, and W012 patterns early. They use this skill to restructure imperative external-content fetches into passive hints and offload install commands to frontmatter. This prevents downstream PR blocks when the skill hits a shared registry.

A platform team enforces agent-skill scanner compliance as a required CI check across a monorepo of internal skills. When a contributor's PR fails on W011 or W012 alerts, this skill guides the contributor through content restructuring rather than suppression. The goal is passing the gate without losing documentation value.

A maintainer's PR is blocked by agent scanner failures on a marketplace or skill library, and they need to remediate multiple high-severity alerts efficiently. This skill provides alert-by-alert remediation order (W001, then W011, then W012) with re-scans after each fix. The maintainer preserves all original information while satisfying scanner rules.

A security engineer auditing externally-sourced skill directories needs to distinguish real prompt-injection risks from false positives flagged as W001/W011/W012. This skill interprets the alert taxonomy against concrete file content across SKILL.md, references, and assets. Restructuring removes unsafe patterns while keeping the skill functional.

A team migrating a legacy skill library to a scanner-enforced standard batch-remediates dozens of files without breaking behavior. They use the pattern catalogs for MCP tool naming, URL imperatives, and version pinning. Version pinning and frontmatter install blocks eliminate recurring W012 alerts across the library.

A freely licensed MIT skill distributed via GitHub that helps developers author scanner-compliant agent skills. Adoption grows through community contribution and inclusion in curated skill libraries. It complements the scanner tool without replacing it.

A paid add-on sold to enterprises that bundles scanner remediation guidance with CI policy enforcement for internal skill repositories. It reduces PR friction and enforces organizational content standards. Pricing is per-seat or per-repository within platform subscriptions.

A consultancy or platform offering that audits, remediates, and maintains agent skill directories against scanner policies for clients. Experts use the skill to perform restructuring at scale and certify compliance. Ongoing retainers cover new skills and policy changes.