Stats
Actions
Available In
Tags
Plugin
subimage-mcp
Operator workflows over the SubImage MCP server: triage findings, investigate CVEs, review attack paths, and audit cartography coverage. Requires a connected SubImage tenant.
What's Inside
Skills4
improve-cartography-coverage
/improve-cartography-coverage
Audit the current repo for cloud / SaaS providers that are NOT yet wired into SubImage, then check whether the SubImage compliance framework is enabled and surface its top actionable findings. Use when the user asks to "improve SubImage coverage", "what should I connect to SubImage", "audit cartography coverage", "what's missing in my SubImage setup", or runs this on a recurring schedule against their IaC repo. Closes the loop between "I have IaC defining X" and "SubImage tells me what's wrong with X".
investigate-cve
/investigate-cve
Investigate a specific CVE in SubImage end-to-end (severity, KEV status, affected resources, fixability) and offer to pivot into attack-path exploration on the impacted assets. Use when the user mentions a CVE id ("CVE-2024-3094", "what's affected by CVE-2023-44487"), asks to "investigate this CVE", "is this CVE exploitable in our environment", "should we patch this", or hands off a vendor advisory. Always finishes by asking whether to chain into review-attack-path.
review-attack-path
/review-attack-path
Walk a SubImage attack path step by step, identify the most sensitive impacted assets, propose the fastest remediation, hunt for credible n+1 extensions the engine has not yet modeled, and optionally simulate what-if scenarios. Use when the user asks to "review this attack path", "explain this attack path", "what would happen if X is compromised", "what attack paths involve <asset>", "find lateral movement opportunities from <asset>", "assess the blast radius of <asset>", or pivots from `subimage-mcp:investigate-cve`. Three entry modes: by path id, by asset id, or n+1 extension hunt.
triage-new-findings
/triage-new-findings
Triage SubImage security findings against the enabled compliance frameworks, group them by theme, and recommend the next investigation steps. Use when the user asks to "triage findings", "what's new in SubImage today", "summarize my open findings", "any urgent findings", or wants a daily/weekly findings digest. Pulls framework status first, then per-framework rules and findings, and proposes the highest-priority items per framework.
Stats
Version0.1.0
LanguageHTML
Stars0
MaintenanceGood
LicenseMIT
Last Commit
Added
Available In
Tags
Categories
