{"slug":"performing-sca-dependency-scanning-with-snyk","source_name":"performing-sca-dependency-scanning-with-snyk","name":"Performing Sca Dependency Scanning With Snyk","description":"This skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source dependencies in CI/CD pipelines. It addresses scanning package manifests and lockfiles, automated fix pull request generation, license compliance checking, continuous monitoring of deployed applications, and integration with GitHub, GitLab, and Jenkins pipelines.","version":1,"lift":{"pass_rate_delta_pts":22.73,"pass_rate_pct":27.3,"total_cases":22,"passed_cases":6,"tokens_delta_pct":70.9,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T11:23:29.012350+00:00"},"skill_score":0.2727,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":22.73,"with_pass_pct":27.3,"without_pass_pct":4.5,"tokens_delta_pct":70.9,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-07-28T11:23:29.012350+00:00","run_id":"b9b1454e-9149-4925-9fe1-58b110481bb5","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"15ade7e3e2d1e44271067aae813ddad3e0689487a278189ac7ba11d01af2f860","raw_url":"https://app.decimal.ai/s/performing-sca-dependency-scanning-with-snyk/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/performing-sca-dependency-scanning-with-snyk"}