from skilllearnbench17
Run Trivy in offline mode to scan dependency files (package-lock.json, etc.) for HIGH/CRITICAL vulnerabilities and produce machine-readable JSON results.
This skill provides a concise, reproducible workflow for running the Trivy vulnerability scanner in fully offline mode against dependency files (for example, package-lock.json). It documents the exact CLI flags required to avoid network access, filter severities to HIGH and CRITICAL, and emit JSON output suitable for automated parsing. The skill includes flag explanations and a sample JSON output structure so agents can interpret results consistently.
Use this skill when you need to scan project dependency manifests in air-gapped or restricted environments, or when CI runners lack internet access for DB updates. It's ideal for scheduled security checks where only high-severity findings should trigger alerts, and for automation pipelines that consume Trivy's JSON output for triage or reporting.
This is a CLI-focused skill and works well with agent runtimes that can execute shell commands or orchestrate CI jobs (Copilot/Codex-like agents, CLI automation agents, or Claude Code style integrations).
This skill has not been reviewed by our automated audit pipeline yet.
