القائمة
Use when a task needs the local `trivyScan` or `trivyHelp` MCP tools to scan a filesystem path, repo, config, SBOM, or image for vulnerabilities and misconfigurations.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Use when a task needs Mandiant capa through the local `runCapa` or `capaHelp` MCP tools, especially when forming a valid capa command string, choosing output mode, or avoiding path-quoting mistakes.
Use when a task needs the local YARA MCP tools `yaraScan`, `yaraScanInline`, `yaraWriteRule`, `yaraListRules`, or `yaraHelp`, including choosing whether to scan with a saved rule file, inline rule text, or persist a rule into the standardized generated-artifact YARA directory.
Use when writing, reviewing, or explaining YARA rule syntax, or when preparing `rule_text` for `yaraScanInline` or `yaraWriteRule` so the rule can be saved into the standardized generated-artifact YARA directory.
Use when a task should persist reusable helper files such as Python deobfuscation scripts, Java helpers, reports, or Ghidra-supporting snippets into the standardized agent artifact directory tree.
Use when the task requires emitting a patched binary copy through the local MCP tool lane, especially for short instruction patches or explicit byte replacements.
Use when a task would benefit from a secondary model call through the local MCP tool lane, especially for Hugging Face or OpenAI-compatible inference, decompilation cleanup, classification, or comparing competing interpretations.
| name | trivy-mcp |
| description | Use when a task needs the local `trivyScan` or `trivyHelp` MCP tools to scan a filesystem path, repo, config, SBOM, or image for vulnerabilities and misconfigurations. |
trivyScan(target, scan_type="filesystem", severity=None, ignore_unfixed=False, timeout_sec=600, output_mode="json_compact")trivyHelp(timeout_sec=5)target: local path for filesystem, repo, config, or sbom; image reference for image.scan_type: one of image, filesystem, repo, config, sbom.severity: optional list such as ["HIGH", "CRITICAL"].ignore_unfixed=True: suppress unfixed issues.output_mode="json_compact": best default for summaries.json_full only when the task needs the full Trivy document.text only when a raw CLI-style view is specifically needed.