---
name: snyk-fix
slug: snyk-fix
score: 49
rubric: 1.0
provenance: verified-org
publisher: Snyk
license: Apache-2.0
capability: action-taking
canonical: https://top-agent-skills.com/skill/snyk-fix
---

# snyk-fix

The remediation half of security work: scan, fix, validate the fix, open the PR. Batch mode handles a whole backlog of CVEs in one pass.

## Install

### Claude Code

```bash
curl -fsSL 'https://raw.githubusercontent.com/snyk/studio-recipes/main/installer/dist/snyk-studio-install.sh' -o snyk-studio-install.sh
```

## Best for

Closing the loop from finding to validated fix to pull request, rather than producing another list of vulnerabilities nobody has time to triage.

## Not ideal for

Environments without Snyk. It requires the Snyk MCP server and an authenticated account, plus the GitHub CLI for PR creation — and it edits files, so review its diffs like any other agent-authored change.

## About

Complete security remediation workflow. Scans code for vulnerabilities using Snyk, fixes them, validates the fix, and optionally creates a PR. Supports both single-issue and batch mode for multiple vulnerabilities. Use when asked to fix security vulnerabilities, when the user mentions 'snyk fix', 'security fix' or 'remediate vulnerabilities', when fixing a specific CVE, Snyk ID or vulnerability type (XSS, SQL injection, path traversal), when upgrading a vulnerable dependency, or when asked to fix all high or critical issues.

## Compatibility

claude-code

## Metadata

- Categories: security-auditing, devops-infra
- Surfaces: claude-code
- Tags: Snyk, SCA, Remediation
- Setup time: 10 min
- Complexity: High
- Last update: 2026-08-12
- Verified: —
- Source: https://github.com/snyk/studio-recipes
- Docs: https://github.com/snyk/studio-recipes/blob/main/command_directives/synchronous_remediation/skills/snyk-fix/SKILL.md

---

_Indexed by Top Agent Skills. Score breakdown: https://top-agent-skills.com/about/methodology_