New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Snyk Jira Ingest

by epam in epam/ai-dial-chat

Pull REAL Snyk SAST findings from EPAM Jira (Data Center) via the search-export API using a Personal Access Token, and emit them as a stage-output.json artifact for a downstream triage stage.

Apache-2.0Auto-check passedSecurity

Install Snyk Jira Ingest

skills CLI
$ npx skills add epam/ai-dial-chat --skill snyk-jira-ingest -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install epam/ai-dial-chat snyk-jira-ingest --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/epam/ai-dial-chat.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/snyk-jira-ingest .claude/skills/snyk-jira-ingest && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
snyk-jira-ingest
GitHub stars
504
Token cost
~295 tokens
SKILL.md length
108 words
Files
2
Skills in repo
18
Repo updated
First seen
Licence
Apache-2.0

At a glance

Pull REAL Snyk SAST findings from EPAM Jira (Data Center) via the search-export API using a Personal Access Token, and emit them as a stage-output.json artifact for a downstream triage stage.

  • Works in 3 steps: Run the script → Read stage-output.json to confirm it… → Only if the script is denied or errors…
  • Tasks that involve Static analysis and SAST
  • Runs Shell scripts from its folder; calls bash

What it does

Snyk Jira Ingest is an agent skill from epam/ai-dial-chat. Pull REAL Snyk SAST findings from EPAM Jira (Data Center) via the search-export API using a Personal Access Token, and emit them as a stage-output.json artifact for a downstream triage stage. Use when you want the actual Jira-tracked Snyk findings (the same set a human gets by clicking Export on the security filter) rather than a synthetic fixture.

Its SKILL.md is about 300 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `fetch.sh`).

It sits in Security, covering Static analysis and SAST. It works with Snyk and Jira. The repository describes itself as: A default UI for AI DIAL. The licence is Apache-2.0.

When your agent uses it

  • Tasks that involve Static analysis and SAST

Example prompts

  • “/snyk-jira-ingest”

Requirements

  • A Bash shell

Workflow steps

3 steps, taken from the first numbered list in SKILL.md.

  1. Run the script
  2. Read stage-output.json to confirm it exists. **The script already wrote a
  3. Only if the script is denied or errors before that file exists: write a

What it can do on your machine

Read from SKILL.md and the folder at commit 3455656. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships script files (Shell), which the agent can run.

    Shell commands in SKILL.md call:

    • bash

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Snyk Jira Ingest loads about 295 tokens when it runs. Until then it costs about 92 tokens; SKILL.md has 108 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~92
When it runs · the whole SKILL.md, loaded when a task matches
~295

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from epam/ai-dial-chat at commit 3455656, republished under its Apache-2.0 licence (© epam). 108 words, ~295 tokens.

Download SKILL.mdSave it as .claude/skills/snyk-jira-ingest/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
snyk-jira-ingest
description
Pull REAL Snyk SAST findings from EPAM Jira (Data Center) via the search-export API using a Personal Access Token, and emit them as a stage-output.json artifact for a downstream triage stage. Use when you want the actual Jira-tracked Snyk findings (the same set a human gets by clicking Export on the security filter) rather than a synthetic fixture.
disable-model-invocation
true

Snyk → Jira Ingest

Pull the real Snyk SAST findings tracked in EPAM Jira for the downstream triage stage. All the work — fetch, filter to this repo, cap, and writing a schema-valid stage-output.json — is done by the committed script fetch.sh; you only run it and confirm the result. (Config and behaviour are documented in that script.)

Procedure

  1. Run the script:

    bash .claude/skills/snyk-jira-ingest/fetch.sh

  2. Read stage-output.json to confirm it exists. The script already wrote a valid envelope — do not overwrite it. Then finish.

  3. Only if the script is denied or errors before that file exists: write a failed result naming what went wrong. Never fabricate findings or a synthetic export.

© epam, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in .claude/skills/snyk-jira-ingest of epam/ai-dial-chat.

  • SKILL.md
  • fetch.sh

Open the folder on GitHubat commit 3455656

Compare with similar skills

Snyk Jira Ingest next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Snyk Jira Ingest compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Snyk Jira Ingest this skillepam/ai-dial-chat504—~295Automated safety check: PassApache-2.0
Managing Vulnerabilitiesancoleman/ai-design-components525—~3.8kAutomated safety check: PassMIT
Triaging Security Findingsbitwarden/ai-plugins155—~2.2kAutomated safety check: PassCustom licence
Security Scanbagofwords1/bagofwords459—~1.7kAutomated safety check: PassCustom licence
Semgrepvigolium/piolium1401 repos~2.4kAutomated safety check: NotesMIT
C To AstNarwhal-Lab/MagicSkills316—~1.1kAutomated safety check: PassMIT

Similar skills

  • Managing Vulnerabilities

    ancoleman/ai-design-components

    Implementing multi-layer security scanning (container, SAST, DAST, SCA, secrets), SBOM generation, and risk-based vulnerability prioritization in CI/CD pipelines.

    525 GitHub stars~3.8k tokensUpdated 10 mo ago
    SecurityAuto-check passed

  • Triaging Security Findings

    bitwarden/ai-plugins

    Official

    This skill should be used when the user asks to "triage security findings", "fix an Aikido finding", "review Aikido issues", "dismiss a false positive", "check SAST/IaC alerts", or needs to work…

    155 GitHub stars~2.2k tokensUpdated 2 days ago
    SecurityAuto-check passed

  • Security Scan

    bagofwords1/bagofwords

    Run a Snyk security scan of the repo (frontend npm deps, backend pip deps, Dockerfile/base image, and Snyk Code SAST), triage findings, and remediate the real ones with verified fixes.

    459 GitHub stars~1.7k tokensUpdated yesterday
    SecurityAuto-check passed

  • Semgrep

    vigolium/piolium

    Run Semgrep static analysis scan on a codebase using parallel subagents.

    140 GitHub starsUsed in 1 repo~2.4k tokens
    SecurityAuto-check: notes

  • C To Ast

    Narwhal-Lab/MagicSkills

    Parse C source code into an Abstract Syntax Tree (AST). An agent skill from Narwhal-Lab/MagicSkills.

    316 GitHub stars~1.1k tokensUpdated 6 mo ago
    SecurityAuto-check passed

  • Semgrep Security Scan

    trailofbits/skills

    Official

    Detects languages, proposes rulesets for approval, then runs the approved Semgrep scan across a codebase and merges the output into one SARIF file.

    7.5k GitHub stars~3.7k tokensUpdated yesterday
    SecurityAuto-check: notes

More from epam/ai-dial-chat

All 18 skills in this repo

  • Refactoring Audit

    epam/ai-dial-chat

    Deep codebase refactoring audit for AI DIAL Chat. An agent skill from epam/ai-dial-chat.

    504 GitHub stars~4.3k tokensUpdated yesterday
    Auto-check passed

  • Address Current Branch Review

    epam/ai-dial-chat

    Read unresolved GitHub code review threads for the pull request associated with the current branch, classify each comment, and implement and verify required code fixes.

    504 GitHub stars~1.7k tokensUpdated yesterday
    Auto-check passed

  • Create Ticket

    epam/ai-dial-chat

    Interactively create OR update GitHub issues (Bug, Feature, Task) for the current repository.

    504 GitHub stars~4.6k tokensUpdated yesterday
    Auto-check passed

  • Dep Scan

    epam/ai-dial-chat

    Runs Trivy filesystem scan against the repo root and emits structured vulnerability findings (CVE, package, versions) in the SDLC reviewer schema.

    504 GitHub stars~1.2k tokensUpdated yesterday
    Auto-check passed

  • Figma

    epam/ai-dial-chat

    Design-to-code workflow for Figma designs. An agent skill from epam/ai-dial-chat.

    504 GitHub stars~997 tokensUpdated yesterday
    Auto-check passed

  • Git Ship

    epam/ai-dial-chat

    A skill your agent uses whenever the user wants to commit, push, or ship changes in a git repository.

    504 GitHub stars~1.2k tokensUpdated yesterday
    Auto-check passed

Works with

Categories

Questions about Snyk Jira Ingest

What does Snyk Jira Ingest do?

Pull REAL Snyk SAST findings from EPAM Jira (Data Center) via the search-export API using a Personal Access Token, and emit them as a stage-output.json artifact for a downstream triage stage. Snyk Jira Ingest is an agent skill from epam/ai-dial-chat.json artifact for a downstream triage stage.

When should I use Snyk Jira Ingest?

Snyk Jira Ingest fits situations like: tasks that involve Static analysis and SAST.

How do I install Snyk Jira Ingest in Claude Code?

Run `npx skills add epam/ai-dial-chat --skill snyk-jira-ingest -a claude-code`. Or copy the skill folder (.claude/skills/snyk-jira-ingest in epam/ai-dial-chat) into .claude/skills/snyk-jira-ingest in your project. Claude Code loads it when a task matches its description.

How do I install Snyk Jira Ingest in Codex?

Run `npx skills add epam/ai-dial-chat --skill snyk-jira-ingest -a codex`. Or copy the skill folder (.claude/skills/snyk-jira-ingest in epam/ai-dial-chat) into .agents/skills/snyk-jira-ingest in your project. Codex loads it when a task matches its description.

Can I use Snyk Jira Ingest in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add epam/ai-dial-chat --skill snyk-jira-ingest -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/snyk-jira-ingest, .gemini/skills/snyk-jira-ingest, .github/skills/snyk-jira-ingest and .opencode/skills/snyk-jira-ingest in your project.

What does Snyk Jira Ingest need to run?

Going by SKILL.md and its folder, Snyk Jira Ingest needs a shell for the scripts in its folder and the command-line tools its instructions call (bash). Our summary lists: A Bash shell.

Does Snyk Jira Ingest access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Snyk Jira Ingest safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Snyk Jira Ingest use?

Snyk Jira Ingest is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Snyk Jira Ingest use?

About 295 tokens (SKILL.md is roughly 1.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Snyk Jira Ingest?

Skills that share tags, products or a category with Snyk Jira Ingest: Managing Vulnerabilities (ancoleman/ai-design-components, 525 stars), Triaging Security Findings (bitwarden/ai-plugins, 155 stars), Security Scan (bagofwords1/bagofwords, 459 stars) and Semgrep (vigolium/piolium, 140 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Snyk Jira Ingest?

epam (a GitHub organization) maintains it in epam/ai-dial-chat, which has 504 GitHub stars. The repository holds 18 skills in this directory. The repository was last updated on October 9, 2026.

Source: epam/ai-dial-chat on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.