# Trivy

> Use this skill when the user wants to find vulnerabilities, misconfigurations, secrets, sbom in containers and code.

- Skill: `javimosch/trivy` (Agent Skill)
- Install (CLI): `npx skillmds@latest add javimosch/trivy`
- Raw SKILL.md: https://api.skillmd.com/api/skills/javimosch/trivy/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: javimosch (https://skillmd.com/u/javimosch)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/javimosch/trivy

---


# Trivy Plugin

Find vulnerabilities, misconfigurations, secrets, SBOM in containers and code.

## Commands

### Operations
- `trivy image scan` — scan image via trivy
- `trivy fs scan` — scan fs via trivy

## Usage Examples
- "trivy --help"
- "trivy <args>"

## Installation

```bash
brew install aquasecurity/trivy/trivy
```

## Examples

```bash
trivy --version
trivy --help
```

## Key Features
- security\n- scanner\n- vulnerability