Install
$ curl -fsSL 'https://raw.githubusercontent.com/snyk/studio-recipes/main/installer/dist/snyk-studio-install.sh' -o snyk-studio-install.shRead the script before running it. Requires the Snyk MCP server, an authenticated Snyk account, gh for PRs, and a git repo.
Best for
Closing the loop from finding to validated fix to pull request, rather than producing another list of vulnerabilities nobody has time to triage.
Not ideal for
Environments without Snyk. It requires the Snyk MCP server and an authenticated account, plus the GitHub CLI for PR creation — and it edits files, so review its diffs like any other agent-authored change.
About this skill
Complete security remediation workflow. Scans code for vulnerabilities using Snyk, fixes them, validates the fix, and optionally creates a PR. Supports both single-issue and batch mode for multiple vulnerabilities. Use when asked to fix security vulnerabilities, when the user mentions 'snyk fix', 'security fix' or 'remediate vulnerabilities', when fixing a specific CVE, Snyk ID or vulnerability type (XSS, SQL injection, path traversal), when upgrading a vulnerable dependency, or when asked to fix all high or critical issues.
Score breakdown
Score breakdown
rubric 1.0Composite 0–100 score derived from 9 verifiable signals. See the rubric →
Related skills
Security audits run by a real security firm. CodeQL + Semgrep + audit workflows.
Kubernetes hardening by the book. NetworkPolicies, RBAC, OPA, service mesh.
Real exploits, no false positives. 96.15% exploit success across 50+ vuln types.
