菜单
Use when a task needs the local `trivyScan` or `trivyHelp` MCP tools to scan a filesystem path, repo, config, SBOM, or image for vulnerabilities and misconfigurations.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | trivy-mcp |
| description | Use when a task needs the local `trivyScan` or `trivyHelp` MCP tools to scan a filesystem path, repo, config, SBOM, or image for vulnerabilities and misconfigurations. |
trivyScan(target, scan_type="filesystem", severity=None, ignore_unfixed=False, timeout_sec=600, output_mode="json_compact")trivyHelp(timeout_sec=5)target: local path for filesystem, repo, config, or sbom; image reference for image.scan_type: one of image, filesystem, repo, config, sbom.severity: optional list such as ["HIGH", "CRITICAL"].ignore_unfixed=True: suppress unfixed issues.output_mode="json_compact": best default for summaries.json_full only when the task needs the full Trivy document.text only when a raw CLI-style view is specifically needed.Use when a task needs Mandiant capa through the local `runCapa` or `capaHelp` MCP tools, especially when forming a valid capa command string, choosing output mode, or avoiding path-quoting mistakes.
Use when a task needs the local YARA MCP tools `yaraScan`, `yaraScanInline`, `yaraWriteRule`, `yaraListRules`, or `yaraHelp`, including choosing whether to scan with a saved rule file, inline rule text, or persist a rule into the standardized generated-artifact YARA directory.
Use when writing, reviewing, or explaining YARA rule syntax, or when preparing `rule_text` for `yaraScanInline` or `yaraWriteRule` so the rule can be saved into the standardized generated-artifact YARA directory.
Use when a task should persist reusable helper files such as Python deobfuscation scripts, Java helpers, reports, or Ghidra-supporting snippets into the standardized agent artifact directory tree.
Use when the task requires emitting a patched binary copy through the local MCP tool lane, especially for short instruction patches or explicit byte replacements.
Use when a task would benefit from a secondary model call through the local MCP tool lane, especially for Hugging Face or OpenAI-compatible inference, decompilation cleanup, classification, or comparing competing interpretations.