Container Security Scanner
Scan containers for vulnerabilities using Trivy, Snyk, and other security tools
- Type
- Plugin
- Repository
- jeremylongshore/tons-of-skills-marketplace
- GitHub stars
- 2.8k
- License
- MIT
- Repo last updated
- Sep 27, 2026
- Version
- 1.27.0
- Author
- Claude Code Plugins
What Container Security Scanner is
Container Security Scanner is a plugin published in the jeremylongshore/tons-of-skills-marketplace repository on GitHub, which has about 2.8k stars. The repository describes itself as: “Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.”
A plugin is a package that bundles skills, slash commands, subagents, hooks, and MCP connectors so they install together. Plugins are plain files with a manifest at .claude-plugin/plugin.json, and they work in both Claude Code and Claude Cowork.
Installing Container Security Scanner adds everything it ships in one step. Connectors inside a plugin still need to be connected separately, and hooks and subagents only run in Cowork and Claude Code, not in regular chat.
How to install Container Security Scanner
Claude Code
- Add the repository as a plugin marketplace: claude plugin marketplace add jeremylongshore/tons-of-skills-marketplace
- Install the plugin: claude plugin install container-security-scanner@<marketplace-name>, using the marketplace name from the repository's .claude-plugin/marketplace.json.
- Restart the session if the new skills or commands don't appear straight away.
Claude Cowork
- Open Customize → Plugins and choose Add marketplace.
- Enter jeremylongshore/tons-of-skills-marketplace (the owner/repo shorthand works for GitHub).
- Find Container Security Scanner in the list, click Install, then connect any connectors it needs from its Connectors tab.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from plugins/devops/container-security-scanner/.claude-plugin/plugin.json, shared under the repository's MIT license. Read the full file on GitHub.
Scan containers for vulnerabilities using Trivy, Snyk, and other security tools
Installation
/plugin install container-security-scanner@claude-code-plugins-plusUsage
/container-scanFeatures
- Production-ready
- Best practices
- Multi-platform
- Well-documented
License
MIT
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Container Security Scanner?
Container Security Scanner is a plugin for Claude Code and Claude Cowork from the jeremylongshore/tons-of-skills-marketplace repository on GitHub. Scan containers for vulnerabilities using Trivy, Snyk, and other security tools
How do I install Container Security Scanner in Claude Code?
Add the repository as a plugin marketplace: claude plugin marketplace add jeremylongshore/tons-of-skills-marketplace Install the plugin: claude plugin install container-security-scanner@<marketplace-name>, using the marketplace name from the repository's .claude-plugin/marketplace.json. Restart the session if the new skills or commands don't appear straight away.
Can I use Container Security Scanner in Claude Cowork?
Open Customize → Plugins and choose Add marketplace. Enter jeremylongshore/tons-of-skills-marketplace (the owner/repo shorthand works for GitHub). Find Container Security Scanner in the list, click Install, then connect any connectors it needs from its Connectors tab.
Is Container Security Scanner safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Secret Scanner Scan codebase for exposed secrets, API keys, passwords, and sensitive credentials Plugin · jeremylongshore/tons-of-skills-marketplace
- Security Audit Reporter Generate comprehensive security audit reports Plugin · jeremylongshore/tons-of-skills-marketplace
- Secrets Manager Integrator Integrate with secrets managers (Vault, AWS Secrets Manager, etc) Plugin · jeremylongshore/tons-of-skills-marketplace
- Security Auditor Expert OWASP Top 10 vulnerability scanner and security code reviewer that identifies injection flaws, auth failures, misconfigurations, and crypto weaknesses with CWE-mapped findings and remediation code. Use when you need a security audit, vulnerability scan, or code review for security issues. Trigger with \"security audit\", \"scan for vulnerabilities\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Contract Test Validator API contract testing with Pact, OpenAPI validation, and consumer-driven contract verification Plugin · jeremylongshore/tons-of-skills-marketplace
- Container Registry Manager Manage container registries (ECR, GCR, Harbor) Plugin · jeremylongshore/tons-of-skills-marketplace
- Contributing Clanker Portable OSS contribution workflow with separated audit, preparation, and human-approved publishing authority Plugin · jeremylongshore/tons-of-skills-marketplace
- Computer Vision Processor Computer vision image processing and analysis Plugin · jeremylongshore/tons-of-skills-marketplace