Container Scan
Scan containers for vulnerabilities using Trivy, Snyk, and other security tools
- Type
- Slash Command
- Repository
- jeremylongshore/tons-of-skills-marketplace
- GitHub stars
- 2.8k
- License
- MIT
- Repo last updated
- Sep 27, 2026
What Container Scan is
Container Scan is a slash command published in the jeremylongshore/tons-of-skills-marketplace repository on GitHub, which has about 2.8k stars. The repository describes itself as: “Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.”
A slash command is a reusable prompt saved as a markdown file and run by typing its name after a slash. In Claude Code, custom commands have been merged into skills: a file in .claude/commands/ and a skill folder in .claude/skills/ both create the same kind of command, and existing command files keep working.
Container Scan gives you a repeatable way to run the same instructions without retyping them, optionally with arguments.
How to install Container Scan
Claude Code
- Download container-scan.md from the repository.
- Save it to ~/.claude/commands/ (all projects) or .claude/commands/ (one project). As a skill, you can instead save it as ~/.claude/skills/<name>/SKILL.md.
- Run it by typing / followed by its name.
Claude Cowork
- Turn the command into a skill: create a folder with the file saved as SKILL.md and zip it.
- In Customize → Skills, click +, then upload the ZIP.
- Run it from any task with / and the skill name.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from plugins/devops/container-security-scanner/commands/container-scan.md, shared under the repository's MIT license. Read the full file on GitHub.
Scan containers for vulnerabilities using Trivy, Snyk, and other security tools
Key Features
- Production-ready configurations
- Best practices implementation
- Security-first approach
- Scalable architecture
- Comprehensive documentation
- Multi-platform support
Example Usage
This plugin generates complete configurations for your DevOps needs. Specify your requirements and get production-ready code instantly.
When Invoked
Generate configurations and setup code based on your specific requirements and infrastructure needs.
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Container Scan?
Container Scan is a slash command for Claude Code and Claude Cowork from the jeremylongshore/tons-of-skills-marketplace repository on GitHub. Scan containers for vulnerabilities using Trivy, Snyk, and other security tools
How do I install Container Scan in Claude Code?
Download container-scan.md from the repository. Save it to ~/.claude/commands/ (all projects) or .claude/commands/ (one project). As a skill, you can instead save it as ~/.claude/skills/<name>/SKILL.md. Run it by typing / followed by its name.
Can I use Container Scan in Claude Cowork?
Turn the command into a skill: create a folder with the file saved as SKILL.md and zip it. In Customize → Skills, click +, then upload the ZIP. Run it from any task with / and the skill name.
Is Container Scan safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Geepers Services Manages Linux service lifecycle (start, stop, restart, health check, crash investigation) via systemd and the sm service manager, delegating all routing changes to geepers_caddy. Use when a service is down, crashing, or needs deployment. Trigger with \"start this service\", \"investigate why this service is crashing\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Geepers React Implements and reviews React components using modern hooks, state management, and performance patterns (memoization, virtualization, code splitting) with TypeScript. Use when architecting components, debugging re-renders, or choosing a state strategy. Trigger with \"build this React component\", \"review my React code\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Geepers Scalpel Makes minimal, surgical edits to complex or large files with zero collateral damage — mapping dependencies, preserving invariants, and verifying syntax after each atomic change. Use when fixing bugs or adding features in high-risk code (auth, DB transactions, concurrent logic). Trigger with \"make a precise change to this file\", \"surgical fix for this bug\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Geepers Snippets Harvests reusable code patterns from projects into a categorized snippet library, deduplicates existing entries, and updates the searchable JSON index and HTML GUI. Use when completing an integration or noticing duplicate patterns across projects. Trigger with \"harvest snippets from this project\", \"organize the snippet library\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Continue Execute the next step in the current session Slash Command · jeremylongshore/tons-of-skills-marketplace
- Connection Pool Set up and optimize database connection pooling Slash Command · jeremylongshore/tons-of-skills-marketplace
- Contract Test Validate API contracts with consumer-driven testing and OpenAPI validation Slash Command · jeremylongshore/tons-of-skills-marketplace
- Component Generator Generate React components from descriptions with TypeScript and tests Slash Command · jeremylongshore/tons-of-skills-marketplace