skills.rest
chfle
chfleCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

linux-vuln-scanner

Orchestrate CVE scans, port discovery, TLS audits, and web scans for Linux hosts.

3|1|Updated Feb 24, 2026
Search Tags:#vulnerability#linux#nmap#cve#trivy#security-scan
One-click install
npx skills add https://github.com/chfle/lehnert-claude-skills --skill linux-vuln-scanner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: linux-vuln-scanner
Source: https://github.com/chfle/lehnert-claude-skills/tree/main/skills/linux-vuln-scanner
Command: npx skills add https://github.com/chfle/lehnert-claude-skills --skill linux-vuln-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Linux vulnerability assessments across hosts, containers, and web apps are often manual, fragmented, and error-prone.

Core Features & Use Cases

  • Automates OS CVE scans (Trivy), port discovery (nmap), TLS audits (testssl.sh), and web scanning (Nikto) in a single workflow.
  • Writes all scan scripts to disk and prevents leaking raw findings in chat, enabling repeatable security audits.
  • Use Case: You want a repeatable security assessment for a Linux server you own, with results stored locally for compliance reporting.

Quick Start

Install the vulnerability scanner tools once, then run the generated full-scan.sh against your target.

Frequently Asked Questions about linux-vuln-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a Linux vulnerability assessment across servers and containers?▼

Automating Linux vulnerability assessments involves orchestrating OS CVE scans, port discovery, TLS audits, and web app scans into a single reproducible workflow. This generates executable scripts for comprehensive security assessments across Linux servers and Docker hosts.

Does this vulnerability scanner require installing separate tools for nmap and Trivy?▼

Yes, you must install Trivy, nmap, testssl.sh, and Nikto. Once these dependencies are installed, the generated full-scan.sh script orchestrates them to execute the complete security assessment workflow.

What is the best way to scan Linux hosts for CVEs without exposing raw findings in chat?▼

The best way to scan Linux hosts for CVEs securely is to write all scan scripts and outputs directly to disk rather than exposing raw findings in chat. This prevents data leakage and enables repeatable security audits for local compliance reporting.

Can I use this workflow to perform TLS audits and web app scans on web-facing services?▼

Yes, you can use this workflow to perform TLS audits and web app scans on web-facing services. It integrates testssl.sh for TLS audits and Nikto for web scanning, alongside nmap for port discovery and Trivy for OS CVEs.

Are there limitations when running a security scan on Docker hosts and web apps?▼

A key limitation is that you must have explicit permission to test the Linux servers, Docker hosts, or web-facing services. Additionally, all vulnerability scan outputs are written to disk and are not exposed in the chat interface.

Related Skills

Explore More Software Engineering Skills→
brucesongsbrucesongs
60

security-misconfiguration

Detect and remediate security misconfigurations across web, cloud, and container deployments.

Community
Advanced
ShaheerKhawajaShaheerKhawaja
8

pos-security

Audit codebases for OWASP Top 10, dependency CVEs, and secret patterns.

Community
Advanced
msaad00msaad00
29

agent-bom-runtime

Correlate runtime events with CVE findings for security monitoring.

Community
Intermediate
DCx7C5DCx7C5

agentless-SKILL.md

Scan Linux and Windows hosts via SSH, WinRM, and cloud APIs.

Community
Advanced