agentpluginsdirectory
NousResearch avatar

snyk

v1.0.0

by NousResearch · author: Nous Research

Scan code, dependencies, containers and IaC with Snyk's first-party MCP server (shipped inside the pinned Snyk CLI), with the snyk-security-scan workflow skill bundled.

What snyk does, in the publisher's words

Scan code, dependencies, container images, IaC and SBOMs from Hermes Agent through Snyk's first-party MCP server. Snyk ships the server inside the Snyk CLI (snyk mcp is a vendor subcommand, not a community wrapper), so this plugin is a pinned npx stdio launch plus a workflow skill.

This is a portable Agent Plugins v1 package. One install ships:

  • mcp.json: the Snyk MCP server entry (sn), registered for every new session while the plugin is enabled. No mcp_servers edits in config.yaml.
  • skills/snyk-security-scan/: the workflow skill: when to use which scanner, the auth/trust/scan/fix loop, pitfalls, and a full per-tool argument reference generated from the live server.

From the project README, punctuation lightly normalized · Open the README on GitHub

Skills
1
MCP servers
1
Stars
10
License
MIT
Repo created
2026-09-12
Last pushed
2026-10-11
Publisher type
Organization
Version
1.0.0

Links

Skills · 1

snyk-security-scan
Scan code, dependencies, containers, IaC and SBOMs with Snyk via its first-party MCP server: authenticate, trust a folder, run the right scanner, read the findings, fix and re-scan. Includes package-health checks before adding a dependency.

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

MCP servers · 1

snstdio
npx -y snyk@1.1306.0 mcp -t stdio --profile full --DISABLE_ANALYTICS
env vars: SNYK_DISABLE_ANALYTICS

Read from the plugin's own mcp.json. We list environment variable names, never values.

Category

Other. Assigned by this directory. Agent Plugins 1.0.0 has no category field, so no manifest declares one.

Keywords

snyk · security · sast · sca · dependencies · vulnerabilities · container · iac · sbom · mcp

Related by publisher and keywords

  • snykNousResearch

    Scan code, dependencies, containers and IaC with Snyk's first-party MCP server (shipped inside the pinned Snyk CLI), with the snyk-security-scan workflow skill bundled.

  • blenderNousResearch

    Connect Hermes to the official Blender Lab MCP server and load a Blender workflow skill. The skill opens Blender when a task needs it, and installs Blender 5.1+ and its MCP add-on after the user agrees.

  • meshyNousResearch

    Generate, texture, rig, animate and 3D-print models with Meshy AI through Meshy's first-party MCP server (pinned @meshy-ai/meshy-mcp-server@0.6.5 over npx stdio), with a meshy-3d workflow skill bundled. Credit-spending calls ask for approval first. In Hermes Desktop: inline three.js 3D cards, a model gallery and a credit chip.

  • reaNousResearch

    Reverse engineer programs with REA: inspect native binaries,.NET assemblies, Electron/JavaScript apps, Android packages, firmware and browser activity through REA's MCP server (pinned rea-agents@6.7.0 over npx stdio), with REA's reverse-engineer-anything workflow skill and a crash-triage skill (core dump + binary to root cause) bundled.

  • tdNousResearch

    Drive a live TouchDesigner session through the twozero MCP server, with the touchdesigner-mcp skill (workflow, pitfalls, recipes) bundled.

  • nvidia-appNousResearch

    MCP server and skill for NVIDIA App on Windows; tools appear while the app is installed and running.

Add the verified badge to your README[![Verified by AgentPluginsDirectory.com against Schema 1.0.0](https://agentpluginsdirectory.com/badge.svg)](https://agentpluginsdirectory.com/plugins/snyk)

✓ Verified . We fetched the manifest from GitHub and checked it against the official Agent Plugins 1.0.0 schema at agent-plugins.org.