skills.rest
xalgord
xalgordCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

implementing-vulnerability-management-with-greenbone

Automate Greenbone/OpenVAS vulnerability scans and parse GMP reports with python-gvm.

954|172|Updated Mar 13, 2026
Search Tags:#vulnerability management#vulnerability scanning#cvss#openvas#gmp#greenbone#python-gvm
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill implementing-vulnerability-management-with-greenbone
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: implementing-vulnerability-management-with-greenbone
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/vulnerability-management/implementing-vulnerability-management-with-greenbone
Command: npx skills add https://github.com/xalgord/xalgorix --skill implementing-vulnerability-management-with-greenbone

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python-gvm.

What problem does it solve?

Manually operating Greenbone/OpenVAS through its web UI makes it hard to integrate vulnerability scanning into automated security workflows, and raw XML scan reports are difficult to turn into actionable findings.

Core Features & Use Cases

  • Programmatic GMP Control: Connect to GVM via Unix socket or TLS, authenticate, and manage scan targets, tasks, and configs entirely through the python-gvm API.
  • Scan Execution & Monitoring: Create targets with port lists, launch scan tasks, and poll task status until completion.
  • Report Parsing: Retrieve XML reports and extract vulnerabilities, CVE references, CVSS scores, and per-host findings into a JSON summary with severity distribution.
  • Use Case: A security engineer schedules weekly authenticated scans of a server fleet, then automatically generates a JSON report ranking critical and high findings by CVSS score for the remediation team.

Quick Start

Use the Greenbone vulnerability management skill to connect to my GVM instance, create a scan target for 192.168.1.0/24, run a full scan, and summarize the findings by severity.

Frequently Asked Questions about implementing-vulnerability-management-with-greenbone

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OpenVAS scan from Python?▼

Use the python-gvm library to connect via UnixSocketConnection or TLSConnection, authenticate with gmp.authenticate, then create a target and task and start it with gmp.start_task. Poll gmp.get_task to monitor progress until the scan completes.

How to parse Greenbone scan reports in Python?▼

Retrieve the report with gmp.get_report using the report ID and a format ID, which returns XML. Parse the XML to extract vulnerabilities, CVE references, CVSS scores, and affected hosts, then summarize into JSON with severity breakdowns.

Does python-gvm support remote GVM connections?▼

Yes, python-gvm supports TLSConnection for remote TCP/TLS access to the GVM daemon in addition to local UnixSocketConnection. Both require valid GMP username and password credentials for authentication.

Why does my OpenVAS scan miss vulnerabilities on some hosts?▼

Common causes include stale NVT feeds, missing SSH/SMB credentials for authenticated checks, alive-test settings skipping hosts that block ICMP, and port lists that exclude high ports. Validate feed version, authentication NVTs, and scanned host counts.

What are the prerequisites for using python-gvm with Greenbone?▼

You need Greenbone Community Edition or Enterprise installed, Python 3.9 or later with python-gvm installed via pip, GMP access credentials, and network connectivity to the GVM daemon over a Unix socket or TLS.

Related Skills

Explore More Software Engineering Skills→
consigcody94consigcody94

Nmap Scan

Run two-phase Nmap scans to enumerate open ports and services.

Community
Advanced
starwreckntxstarwreckntx

Vulnerability Management Agent

Track vulnerabilities across assets using CVE/CVSS standards and CVSS scoring.

Community
Basic
protoLabsAIprotoLabsAI
2

Security Research Skill

Aggregate and correlate security intelligence from CVE feeds, exploit databases, and RSS sources.

Official
Advanced
DCx7C5DCx7C5

agentless-SKILL.md

Scan Linux and Windows hosts via SSH, WinRM, and cloud APIs.

Community
Advanced