The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill includes documentation and CI/CD templates that reference the official Grype installation script hosted on the Anchore GitHub repository (raw.githubusercontent.com/anchore/grype/main/install.sh). This is the standard distribution method for the tool.
[COMMAND_EXECUTION]: The skill provides numerous examples of using the grype and docker CLI tools. These commands are directly related to the skill's core purpose of scanning container images and filesystems for vulnerabilities.
[REMOTE_CODE_EXECUTION]: The CI/CD configuration templates demonstrate how to integrate various security scanners such as Semgrep, Safety, and Trivy. These examples use standard package managers (pip, npm) and official GitHub Actions to perform security analysis, which are standard devsecops practices.
[DATA_EXFILTRATION]: While the skill involves scanning images which may contain metadata, the workflows focus on local scanning or standard CI/CD integration. No unauthorized data exfiltration patterns were detected. All network operations are directed towards official vulnerability databases or trusted package registries.

container-grype