Works with the AI Agents you already use
Claude Code
Cursor
Codex CLI
Muse
Dots+21 moreClaude CodeCursorCodex CLIMuseDots
Manus
Grok
Grok Bot+18 agentsASCII Video Converter — Colored ASCII Animation Generator
Convert video or audio into animated ASCII art using FFmpeg, luminance-based character mapping, ANSI colors, and optional video re-encoding.
$5
ASCII Video Converter — Colored ASCII Animation Generator
Example session with this skill installed
Convert these Trivy JSON logs into a professional report. Identify critical vulnerabilities in the frontend container image and provide a remediation roadmap. Do not invent any CVE details.
- Read your context and instructions
- Compiled the ascii video converter
I have processed the Trivy JSON logs for the frontend-app:latest container image. The findings have been normalized, deduplicated, and organized into a remediation-focused audit report.
Security Audit Report
1. Report Overview
- Assessment scope: Vulnerability scan of
frontend-app:latestcontainer image. - Source tools: Trivy v0.49.1
- Data limitations: Scan limited to OS packages and application dependencies. No runtime configuration provided.
- Validation status: All findings are Scanner-reported based on version detection.
2. Executive Summary
The scan identified 12 vulnerabilities, with 2 categorized as Critical and 3 as High. The primary risks involve outdated library versions in the base image (Debian Bullseye). Immediate updates to the base image and specific Node.js dependencies are required to mitigate potential remote code execution paths.
3. Findings Summary
| Priority | Count | Summary |
|---|---|---|
| Critical | 2 | Remote Code Execution in libssl and glibc |
| High | 3 | Denial of Service in express and body-parser |
| Medium | 7 | Information disclosure and hardening opportunities |
4. Detailed Findings
[Critical] Use of Outdated OpenSSL Version
- Finding ID / source: CVE-2023-3817 (Trivy)
- Status: Scanner-reported
- Affected asset:
frontend-app(libssl1.1 version 1.1.1n-0+deb11u4) - Original severity / score: 9.1 (Critical)
- Confidence: High
- Evidence: Package
libssl1.1detected at vulnerable version.
Why it matters: May allow an attacker to trigger a denial of service or potentially execute code via malformed handshakes.
Recommended remediation: Update base image to debian:bullseye-slim (latest) or manually upgrade libssl1.1 to 1.1.1w-0+deb11u1.
- Validation / retest steps: Run
apt-cache policy libssl1.1and verify version is >= 1.1.1w.
5. Remediation Roadmap
| Priority | Action | Related finding IDs | Suggested owner role | Validation |
|---|---|---|---|---|
| Immediate | Update base image and rebuild container | CVE-2023-3817 | DevOps Engineer | Scan new image |
| Near-term | Patch Node.js middleware dependencies | CVE-2023-45133 | Frontend Developer | npm audit |
Next steps
- Rebuild the container image using the latest stable base.
- Schedule a follow-up scan to verify the closure of these CVEs.
- Review the
npmdependency tree for secondary vulnerabilities.
Connects securely to your tools. The creator never sees your data.
About this skill
Raw security scanner logs are often indecipherable to stakeholders and overwhelming for developers. This skill converts messy console output, JSON, and SARIF exports into structured, client-ready audit reports that prioritize remediation without losing technical traceability.
What it does
- Normalizes findings by extracting identifiers, assets, and evidence from raw tool logs while grouping duplicates.
- Triages severity by mapping scanner scores to a clear qualitative rubric based on risk and context.
- Assesses confidence by distinguishing between unverified scanner claims and evidence-supported observations.
- Generates remediation roadmaps that organize fixes into immediate, near-term, and hardening phases.
- Redacts sensitive data by masking secrets, tokens, and credentials found within the original logs.
How it works
- Input logs from DAST, SAST, dependency, or cloud configuration scanners in formats like JSON, CSV, or plain text.
- Parse and normalize the data to extract finding IDs, affected assets, and original severity scores.
- Generate report including an executive summary, a findings table, and detailed technical remediation steps.
Frameworks & tools
Works with any security scanner output including SARIF, JSON, XML, or console text from tools like Snyk, OWASP ZAP, Trivy, or cloud-native inspectors.
Why this beats prompting it yourself
Writing these reports manually is prone to copy-paste errors and inconsistent severity mapping. This skill enforces strict evidence rules to prevent hallucinating CVEs or overstating security posture while ensuring every fix includes a concrete validation step.
Use cases
- Client delivery of professional security assessments after automated scanning phases.
- Internal triaging of massive vulnerability backlogs into actionable developer tickets.
- Retest tracking to document which findings were resolved and which remain unverified.
Known limitations
Does not perform active security testing or manual penetration testing. It only organizes and explains the data you provide. Accuracy depends on the quality and completeness of the input logs.
Does not perform active testing. Accuracy depends on the provided logs. Cannot verify vulnerabilities without external evidence. Redacts secrets but does not replace secure data handling.
How to use
- 1
Connect your agent to the Agensi MCP
Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup
- 2
Sign in to Agensi
Your agent shows a sign-in link. Sign in and click Allow.
- 3
Ask for what you need
Your agent loads this skill and uses it on your task. It always asks before any payment.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill goes through the trust checks below.
Security scanned
Checked by our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scan
Security scan passed 12 days ago
- Software
Python
Permissions
No special permissions declared or detected