Container Scanning
This skill scans Docker containers for vulnerabilities and misconfigurations, proactively identifying security risks to protect your applications.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add container-scanning npx -- -y @trustedskills/container-scanning
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"container-scanning": {
"command": "npx",
"args": [
"-y",
"@trustedskills/container-scanning"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill performs container image scanning to identify vulnerabilities and security risks. It analyzes Docker images, looking for known CVEs (Common Vulnerabilities and Exposures) and misconfigurations. The results provide actionable insights for improving the security posture of containerized applications.
When to use it
- Pre-deployment checks: Scan images before deploying containers to production environments to proactively identify and remediate vulnerabilities.
- CI/CD pipeline integration: Automate scanning as part of your continuous integration and delivery pipelines to ensure consistent security practices.
- Security audits: Regularly scan existing container images to assess their current vulnerability status.
- Incident response: Quickly scan container images involved in a suspected security incident to determine the scope of compromise.
Key capabilities
- Vulnerability scanning
- CVE identification
- Misconfiguration detection
- Image analysis
Example prompts
- "Scan this Docker image:
your-dockerhub-username/your-image-name." - "What vulnerabilities are present in the latest version of
nginx?" - “Analyze this container image for security misconfigurations.”
Tips & gotchas
The accuracy of scanning depends on up-to-date vulnerability databases. Ensure your agent has access to current feeds for optimal results.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.