Snyk Fix

This is a full security remediation workflow that scans your code with Snyk, applies fixes, validates them, and optionally creates a PR. It handles both SAST and SCA vulnerabilities in two modes: single issue at a time or batch mode that lets you fix multiple vulnerabilities in priority order. The implementation is thorough, with explicit rules for when to abort (like when Snyk reports no fix path for an SCA issue), grouped instance handling for code vulnerabilities, and smart detection of what you're asking for based on keywords like CVE IDs or vulnerability types. Requires Snyk MCP server and authenticated account. If you're already using Snyk and want automated fixes rather than just scan reports, this compresses what would be a manual multi-step process into one request.

skills.sh installs: 408
GitHub stars: 69
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add snyk/studio-recipes --skill snyk-fix --agent claude-code

Installs into .claude/skills of the current project.

Files

Snyk Fix (All-in-One)

Complete security remediation workflow: Parse → Scan → Analyze → Fix → Validate → Summary → (Optional) PR

Modes:

Single Mode (default): Fix one vulnerability type at a time (all instances in same file)
Batch Mode: Fix multiple vulnerabilities in priority order (triggered by "all", "batch", severity filter, or count)

Phase 1: Input Parsing

Parse user input to extract:

mode: Single (default) or Batch
scan_type: code, sca, or both (inferred from context)
target_vulnerability: Specific issue ID, CVE, package name, file, or vuln type
target_path: File or directory (defaults to project root)
severity_filter / max_fixes: For batch mode (default max: 20)