openvas-SKILL.md

Automate authenticated OpenVAS vulnerability scans and export reports via GMP.

Updated Apr 20, 2026
One-click install
npx skills add https://github.com/DCx7C5/ai-marketplace --skill openvas-skill-md
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: openvas-SKILL.md
Source: https://github.com/DCx7C5/ai-marketplace/tree/main/skills/vulnerabilities/scanning/openvas
Command: npx skills add https://github.com/DCx7C5/ai-marketplace --skill openvas-skill-md

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python-gvm, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

OpenVAS authenticated scanning and management is complex and time-consuming; this skill automates end-to-end workflow for configuring GVM, provisioning targets and credentials, running authenticated scans, and exporting results.

Core Features & Use Cases

  • Credential management: Create and manage SSH/SMB credentials for Linux/Windows targets.
  • Target provisioning: Define hosts, port lists, alive tests, and association with credentials.
  • Scan orchestration: Launch scans using Full/Fast, Full/Deep, or custom configs with GMP.
  • Results export: Export XML/CSV reports for integration with ticketing and SIEM.
  • Use case: Automate PCI/vulnerability assessments across mixed environments with auditable results.

Quick Start

Configure GVM, create a target and credentials, start an authenticated OpenVAS scan, and export the report.

Frequently Asked Questions about openvas-SKILL.md

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate authenticated OpenVAS scans using GMP?

Automate authenticated OpenVAS scans by using the GMP API to orchestrate GVM workflows, manage scan configurations, provision targets, handle credentials, and extract reports. This approach streamlines security assessments and vulnerability management tasks.

Can I manage SSH and SMB credentials for mixed Linux and Windows vulnerability scans?

Yes, you can manage SSH and SMB credentials for Linux and Windows targets. The automation workflow handles credential creation and target provisioning, allowing credentialed scans across mixed environments to ensure accurate vulnerability assessment results.

What is the best way to export OpenVAS scan results for SIEM integration?

The best way to export OpenVAS scan results is by extracting XML or CSV reports via the GMP API. This allows direct integration with ticketing systems and SIEM platforms, providing auditable results for PCI compliance and vulnerability assessments.

Does python-gvm support automating Full and Fast scan configurations?

Yes, python-gmv supports automating Full and Fast scan configurations. The GMP API orchestrates scan lifecycles, allowing you to launch scans using predefined or custom configurations to target specific vulnerabilities across your virtual and physical environments.

How do I provision targets and port lists for OpenVAS vulnerability scanning?

Provision targets by defining hosts, port lists, and alive tests, then associating them with the appropriate credentials. This automated target provisioning via GMP ensures scans are correctly configured to discover vulnerabilities across specified network environments.

When do I need GMP for vulnerability management instead of the Greenbone web interface?

You need GMP for vulnerability management when automating end-to-end workflows like credentialed scans and report extraction is required. It programmatically orchestrates GVM task lifecycles, which is more efficient than manual configuration via the Greenbone web interface.