Agent skill

Performing Container Security Scanning With Trivy

by mukul975 in mukul975/Anthropic-Cybersecurity-Skills

Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed…

Apache-2.0Auto-check passedDevOps & Cloud

Install Performing Container Security Scanning With Trivy

skills CLI

$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-container-security-scanning-with-trivy -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-container-security-scanning-with-trivy --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/performing-container-security-scanning-with-trivy .claude/skills/performing-container-security-scanning-with-trivy && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "performing-container-security-scanning-with-trivy" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-container-security-scanning-with-trivy into .claude/skills/performing-container-security-scanning-with-trivy/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-container-security-scanning-with-trivy", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-container-security-scanning-with-trivy

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-container-security-scanning-with-trivy -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-container-security-scanning-with-trivy --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/performing-container-security-scanning-with-trivy .agents/skills/performing-container-security-scanning-with-trivy && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "performing-container-security-scanning-with-trivy" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-container-security-scanning-with-trivy into .agents/skills/performing-container-security-scanning-with-trivy/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-container-security-scanning-with-trivy", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-container-security-scanning-with-trivy -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-container-security-scanning-with-trivy --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/performing-container-security-scanning-with-trivy .cursor/skills/performing-container-security-scanning-with-trivy && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "performing-container-security-scanning-with-trivy" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-container-security-scanning-with-trivy into .cursor/skills/performing-container-security-scanning-with-trivy/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-container-security-scanning-with-trivy", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-container-security-scanning-with-trivy

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-container-security-scanning-with-trivy -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-container-security-scanning-with-trivy --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/performing-container-security-scanning-with-trivy .gemini/skills/performing-container-security-scanning-with-trivy && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "performing-container-security-scanning-with-trivy" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-container-security-scanning-with-trivy into .gemini/skills/performing-container-security-scanning-with-trivy/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-container-security-scanning-with-trivy", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-container-security-scanning-with-trivy

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-container-security-scanning-with-trivy -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/performing-container-security-scanning-with-trivy .github/skills/performing-container-security-scanning-with-trivy && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "performing-container-security-scanning-with-trivy" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-container-security-scanning-with-trivy into .github/skills/performing-container-security-scanning-with-trivy/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-container-security-scanning-with-trivy", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-container-security-scanning-with-trivy -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-container-security-scanning-with-trivy --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/performing-container-security-scanning-with-trivy .opencode/skills/performing-container-security-scanning-with-trivy && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "performing-container-security-scanning-with-trivy" agent skill from https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/performing-container-security-scanning-with-trivy into .opencode/skills/performing-container-security-scanning-with-trivy/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "performing-container-security-scanning-with-trivy", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: performing-container-security-scanning-with-trivy
GitHub stars: 34k
Token cost: ~818 tokens
SKILL.md length: 286 words
Files: 4 (incl. scripts, references)
Skills in repo: 644
Repo updated: Aug 31, 2026
First seen: Oct 7, 2026
Licence: Apache-2.0

At a glance

Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed…

Works in 4 steps: Scan Container Images → Generate SBOM → Scan IaC and Kubernetes Manifests → …
Integrating Trivy into CI/CD
SKILL.md covers Overview, When to Use, Prerequisites and Steps, plus 1 more section
Runs Python scripts from its folder

What it does

Performing Container Security Scanning With Trivy is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed secrets, and licences, generating CycloneDX or SPDX SBOMs. Use when integrating Trivy into CI/CD, deploying the Trivy Kubernetes operator, scanning non-image targets, or triaging results at scale. Keywords: Trivy, trivy k8s, operator, SBOM, CycloneDX, SPDX, misconfig, secret scanning. Do not use for a single Docker image…

Its SKILL.md is about 820 tokens, which your agent loads only when the skill is triggered. The skill folder holds 5 other files, including scripts and reference files (for example `references/api-reference.md` and `scripts/agent.py`).

It sits in DevOps & Cloud, covering Containers, Supply chain security and Container orchestration. It works with Trivy, Kubernetes, Docker and Git. The repository describes itself as: 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io…. The licence is Apache-2.0.

When your agent uses it

Integrating Trivy into CI/CD
Deploying the Trivy Kubernetes operator
Scanning non-image targets
Triaging results at scale

Example prompts

“/performing-container-security-scanning-with-trivy”

Requirements

Python 3
Docker

Workflow steps

4 steps, taken from the step headings in SKILL.md.

Scan Container Images
Generate SBOM
Scan IaC and Kubernetes Manifests
Integrate into CI/CD

What it can do on your machine

Read from SKILL.md and the folder at commit 54a7988. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/ (Python), which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Performing Container Security Scanning With Trivy loads about 818 tokens when it runs, and up to ~1.4k if it reads all its reference files. Until then it costs about 153 tokens; SKILL.md has 286 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~153
When it runs · the whole SKILL.md, loaded when a task matches: ~818
With references · SKILL.md plus every file in references/, read only if the agent opens them: ~1.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from mukul975/Anthropic-Cybersecurity-Skills at commit 54a7988, republished under its Apache-2.0 licence (© mukul975). 286 words, ~818 tokens.

Download SKILL.mdSave it as .claude/skills/performing-container-security-scanning-with-trivy/SKILL.md (or your agent's skills folder). This skill also uses 3 other files; get the full folder from GitHub.

name: performing-container-security-scanning-with-trivy
description: Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed secrets, and licences, generating CycloneDX or SPDX SBOMs. Use when integrating Trivy into CI/CD, deploying the Trivy Kubernetes operator, scanning non-image targets, or triaging results at scale. Keywords: Trivy, trivy k8s, operator, SBOM, CycloneDX, SPDX, misconfig, secret scanning. Do not use for a single Docker image scan - use scanning-docker-images-with-trivy.
domain: cybersecurity
subdomain: container-security
tags: trivy, container-security, vulnerability-scanning, sbom, docker, kubernetes, devsecops, supply-chain
version: 1.0
author: mahipal
license: Apache-2.0
nist_csf: PR.PS-01, PR.IR-01, ID.AM-08, DE.CM-01
mitre_attack: T1610, T1611, T1609, T1525, T1195

Performing Container Security Scanning with Trivy

Overview

Trivy is an open-source security scanner by Aqua Security that detects vulnerabilities in OS packages and language-specific dependencies, infrastructure-as-code misconfigurations, exposed secrets, and software license issues across container images, filesystems, Git repositories, and Kubernetes clusters. Trivy generates Software Bill of Materials (SBOM) in CycloneDX and SPDX formats for supply chain transparency. This skill covers comprehensive container image scanning, CI/CD pipeline integration, Kubernetes operator deployment, and scan result triage for security operations.

When to Use

When conducting security assessments that involve performing container security scanning with trivy
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing

Prerequisites

Trivy v0.50+ installed (binary, Docker, or Homebrew)
Docker daemon access for local image scanning
Container registry credentials for remote image scanning
CI/CD platform (GitHub Actions, GitLab CI, Jenkins) for pipeline integration
Kubernetes cluster for Trivy Operator deployment (optional)

Steps

Step 1: Scan Container Images

Run vulnerability and secret scanning against container images from local builds or remote registries. Configure severity thresholds and ignore unfixed vulnerabilities.

Step 2: Generate SBOM

Produce CycloneDX or SPDX SBOM documents from scanned images for supply chain compliance and vulnerability tracking across the software lifecycle.

Step 3: Scan IaC and Kubernetes Manifests

Detect misconfigurations in Dockerfiles, Kubernetes YAML, Terraform, and Helm charts using built-in policy checks aligned with CIS benchmarks.

Step 4: Integrate into CI/CD

Add Trivy scanning as a pipeline gate that blocks builds with critical/high vulnerabilities, generates SARIF reports for GitHub Advanced Security, and produces JUnit XML for test dashboards.

Expected Output

JSON/table report listing CVEs with severity, CVSS scores, fixed versions, affected packages, misconfiguration findings, and exposed secrets with file locations.

Files

SKILL.md and 3 other files (scripts, references) in skills/performing-container-security-scanning-with-trivy of mukul975/Anthropic-Cybersecurity-Skills.

SKILL.md
LICENSE
references/api-reference.md
scripts/agent.py

Open the folder on GitHubat commit 54a7988

Compare with similar skills

Performing Container Security Scanning With Trivy next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Performing Container Security Scanning With Trivy compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Performing Container Security Scanning With Trivy this skillmukul975/Anthropic-Cybersecurity-Skills	34k	—	~818	Automated safety check: Pass	Apache-2.0	1 mo ago
Container Securityhardw00t/ai-security-arsenal	105	—	~2.8k	Automated safety check: Pass	None	5 mo ago
Sca TrivyAgentSecOps/SecOpsAgentKit	220	2 repos	~3.7k	Automated safety check: Pass	Custom licence	5 mo ago
Container Security Hardeningsickn33/agentic-awesome-skills	47k	1 repos	~1k	Automated safety check: Notes	MIT	yesterday
Cloud Infra Supply Chainzhaji2333/CkSKILLS	115	—	~688	Automated safety check: Warn	MIT	25 days ago
Cloud AuditCommonHuman-Lab/nyxstrike	157	—	~1.1k	Automated safety check: Pass	Custom licence	yesterday

Similar skills

Container Security
hardw00t/ai-security-arsenal
Container and Kubernetes security assessment — image vulnerability scanning, SBOM diff analysis, K8s cluster auditing, RBAC privilege mapping, NetworkPolicy review, container escape testing, and…
105 GitHub stars~2.8k tokensUpdated 5 mo ago
SecurityAuto-check passed
Sca Trivy
AgentSecOps/SecOpsAgentKit
Software Composition Analysis (SCA) and container vulnerability scanning using Aqua Trivy for identifying CVE vulnerabilities in dependencies, container images, IaC misconfigurations, and license…
220 GitHub starsUsed in 2 repos~3.7k tokens
SecurityAuto-check passed
Container Security Hardening
sickn33/agentic-awesome-skills
Harden Docker/container images and runtime deployments with secure base images, non-root users, CVE scanning, SBOM/signing, seccomp/AppArmor, and Kubernetes pod security controls.
47k GitHub starsUsed in 1 repo~1k tokens
SecurityAuto-check: notes
Cloud Infra Supply Chain
zhaji2333/CkSKILLS
当目标涉及云资产（对象存储/云元数据/Serverless）、容器/K8s、运维面板（宝塔/Grafana/Zabbix/Jenkins/GitLab/Nacos等）、消息队列/缓存中间件、CI/CD流水线、第三方回调集成、依赖组件CVE、信息泄露配置时调用。负责未授权访问、弱口令、云配置错误、供应链漏洞与敏感信息挖掘。
115 GitHub stars~688 tokensUpdated 25 days ago
DevOps & CloudAuto-check: warnings
Cloud Audit
CommonHuman-Lab/nyxstrike
Cloud and container security auditing workflow using prowler, trivy, kube-hunter, and docker-bench for AWS, GCP, Azure, Kubernetes, and container images
157 GitHub stars~1.1k tokensUpdated yesterday
DevOps & CloudAuto-check passed
Devops Automation
rohitg00/awesome-claude-code-toolkit
CI/CD pipeline design with GitHub Actions, Docker, Kubernetes, Helm, and GitOps patterns
2.7k GitHub stars~1.6k tokensUpdated 5 mo ago
DevOps & CloudAuto-check passed

Questions about Performing Container Security Scanning With Trivy

What does Performing Container Security Scanning With Trivy do?

Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed…. Performing Container Security Scanning With Trivy is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed secrets, and licences, generating CycloneDX or SPDX SBOMs.

When should I use Performing Container Security Scanning With Trivy?

Performing Container Security Scanning With Trivy fits situations like: integrating Trivy into CI/CD; deploying the Trivy Kubernetes operator; scanning non-image targets; triaging results at scale.

How do I install Performing Container Security Scanning With Trivy in Claude Code?

Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-container-security-scanning-with-trivy -a claude-code`. Or copy the skill folder (skills/performing-container-security-scanning-with-trivy in mukul975/Anthropic-Cybersecurity-Skills) into .claude/skills/performing-container-security-scanning-with-trivy in your project. Claude Code loads it when a task matches its description.

How do I install Performing Container Security Scanning With Trivy in Codex?

Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-container-security-scanning-with-trivy -a codex`. Or copy the skill folder (skills/performing-container-security-scanning-with-trivy in mukul975/Anthropic-Cybersecurity-Skills) into .agents/skills/performing-container-security-scanning-with-trivy in your project. Codex loads it when a task matches its description.

Can I use Performing Container Security Scanning With Trivy in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-container-security-scanning-with-trivy -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/performing-container-security-scanning-with-trivy, .gemini/skills/performing-container-security-scanning-with-trivy, .github/skills/performing-container-security-scanning-with-trivy and .opencode/skills/performing-container-security-scanning-with-trivy in your project.

What does Performing Container Security Scanning With Trivy need to run?

Going by SKILL.md and its folder, Performing Container Security Scanning With Trivy needs Python for the scripts in its folder. Our summary lists: Python 3; Docker.

Does Performing Container Security Scanning With Trivy access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Performing Container Security Scanning With Trivy safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Performing Container Security Scanning With Trivy use?

Performing Container Security Scanning With Trivy is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Performing Container Security Scanning With Trivy use?

About 818 tokens (SKILL.md is roughly 3.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 630 tokens, read only when the agent opens those files.

What are the alternatives to Performing Container Security Scanning With Trivy?

Skills that share tags, products or a category with Performing Container Security Scanning With Trivy: Container Security (hardw00t/ai-security-arsenal, 105 stars), Sca Trivy (AgentSecOps/SecOpsAgentKit, 220 stars), Container Security Hardening (sickn33/agentic-awesome-skills, 47k stars) and Cloud Infra Supply Chain (zhaji2333/CkSKILLS, 115 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Performing Container Security Scanning With Trivy?

mukul975 (a GitHub user) maintains it in mukul975/Anthropic-Cybersecurity-Skills, which has 34,116 GitHub stars. The repository holds 644 skills in this directory. The repository was last updated on August 31, 2026.

Source: mukul975/Anthropic-Cybersecurity-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Performing Container Security Scanning With Trivy

Facts

At a glance

What it does

When your agent uses it

Example prompts

Requirements

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Performing Container Security Scanning with Trivy

Overview

When to Use

Prerequisites

Steps

Step 1: Scan Container Images

Step 2: Generate SBOM

Step 3: Scan IaC and Kubernetes Manifests

Step 4: Integrate into CI/CD

Expected Output

Files

Compare with similar skills

Similar skills

More from mukul975/Anthropic-Cybersecurity-Skills

Related

Questions about Performing Container Security Scanning With Trivy