# Snyk Security agent skills for Claude Code, Cursor and RevampKey

> Ready-made Snyk Security playbooks for AI agents: review a release or pull request with Snyk scans, triage Snyk dependency vulnerabilities with AI. Free SKILL.md files for Claude Code, Cursor and Codex, or one click in RevampKey.

## Skills

- [Use Snyk Security with AI, safely](https://revampkey.com/marketplace/snyk-security/skills/essentials.md): Connects your AI assistant to Snyk so it can run code, dependency, IaC, container and SBOM scans. It confirms sign-in and scope, picks the right scan, and asks before logging out, trusting a folder or sending feedback.
- [Review a release or pull request with Snyk scans](https://revampkey.com/marketplace/snyk-security/skills/scan-review.md): Runs the Snyk code, IaC, container and SBOM scans that apply to a target, separates new findings from old ones, and gives a ship or hold call. It asks before changing any ignore or organisation setting.
- [Triage Snyk dependency vulnerabilities with AI](https://revampkey.com/marketplace/snyk-security/skills/snyk-dependency-vulnerability-triage.md): Turns Snyk open-source scan results into a short, prioritised list of upgrades, separating runtime risk from dev-only findings and flagging issues with no fix yet. It asks before changing any manifest or lockfile.

## Install

- RevampKey: connect Snyk Security at https://revampkey.com/marketplace/snyk-security; the skills come with it.
- Any Agent Skills tool, into the current project:

```bash
for s in essentials scan-review snyk-dependency-vulnerability-triage; do
  curl -fsSL --create-dirs -o .agents/skills/snyk-security-$s/SKILL.md https://revampkey.com/marketplace/snyk-security/skills/$s/SKILL.md
done
```

### What is a Snyk Security agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Snyk Security skill describes one job, which Snyk Security tools to use in which order, what to check first and when to stop and ask you.

### Do the Snyk Security skills change anything on their own?

1 of the 3 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Snyk Security.

### Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Snyk Security; elsewhere you copy the folders into your project or skills directory.

### Do I need the Snyk Security MCP server too?

Yes. The skills tell the agent how to do the work; the Snyk Security MCP server gives it the tools to do it. The Snyk Security MCP setup guide covers every client.

MCP setup guide: https://revampkey.com/marketplace/snyk-security.md