Skip to content

sysdig/headless-cloud-security

v0.4.2

Sysdig's cloud security expertise, packaged as agent skills that work natively in your AI environment.

GitHubOpen Website
skills

sysdig-remediate

Remediate one specific vulnerable container image and deliver the fix as a PR/MR, a tracking ticket, or both — this skill is the sole ticket creator in the Sysdig vulnerability workflow. Deduplicates existing work (job artifacts, Sysdig-created Jira tickets, external tickets and PRs) read-only, fetches Critical/High CVEs from Sysdig, resolves a safe fix version via chain analysis, opens a PR/MR (GitHub/GitLab) or emits a local patch, creates or updates the Jira ticket, records artifacts on the remediation job, and closes the job once the work is filed. Triggers: "fix the nginx image", "patch CVE-2024-1234 in api-server", "remediate quay.io/org/app:tag", "create a ticket for CVE-2024-9999", "file a Jira ticket for this image", "/sysdig-remediate <image>". Not for: discovery, prioritization, or slicing findings — use /sysdig-investigate.

Read SKILL.md at the source

Pinned to revision 03cadb82f5a2, so it is the text this page describes rather than whatever the author pushed since.

Pre-approved tools experimental

Experimental field. Support varies between clients, so this list is what the author declared, not what your client will enforce.

  • Read
  • Write
  • AskUserQuestion
  • Bash(git status*)
  • Bash(git log*)
  • Bash(git diff*)
  • Bash(git apply*)
  • Bash(git checkout -b sysdig/fix-*)
  • Bash(git add*)
  • Bash(git commit -m*)
  • Bash(git push origin sysdig/fix-*)
  • Bash(git push origin --delete sysdig/fix-*)
  • Bash(gh auth status*)
  • Bash(gh search code*)
  • Bash(gh search repos*)
  • Bash(gh api repos/*)
  • Bash(gh api user*)
  • Bash(gh pr create*)
  • Bash(gh pr list*)
  • Bash(gh pr view*)
  • Bash(gh pr close*)
  • Bash(glab auth status*)
  • Bash(glab api*)
  • Bash(glab mr create*)
  • Bash(glab mr list*)
  • Bash(glab mr view*)
  • Bash(glab mr close*)
  • mcp__secure-mcp-server__get_customer_settings
  • mcp__secure-mcp-server__get_skill_state
  • mcp__secure-mcp-server__save_skill_state
  • mcp__secure-mcp-server__delete_skill_state
  • mcp__secure-mcp-server__run_sysql
  • mcp__secure-mcp-server__explore_jobs
  • mcp__secure-mcp-server__track_job
  • mcp__secure-mcp-server__close_job
  • mcp__secure-mcp-server__list_artifacts
  • mcp__secure-mcp-server__create_artifact
  • mcp__atlassian__searchJiraIssuesUsingJql
  • mcp__atlassian__createJiraIssue
  • mcp__atlassian__editJiraIssue
  • mcp__atlassian__addCommentToJiraIssue

Files

Every link opens the file at its source, pinned to the revision this page describes.