skills.rest
issdandavis
issdandavisCOMMUNITY
Explore all skills by this author →
Website𝕏@davisissacGitHub

security-scanner

Scan web apps, APIs, and infrastructure for vulnerabilities and misconfigurations.

6|1|Updated Jan 17, 2026
Search Tags:#security#vulnerability#scanning#nmap#ssl#nuclei#web-app
One-click install
npx skills add https://github.com/issdandavis/SCBE-AETHERMOORE --skill security-scanner-issdandavis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/issdandavis/SCBE-AETHERMOORE/tree/main/training-data/clawhub-skills/security-scanner
Command: npx skills add https://github.com/issdandavis/SCBE-AETHERMOORE --skill security-scanner-issdandavis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automated security scanning and vulnerability detection for web applications, APIs, and infrastructure, helping teams identify weaknesses and misconfigurations early.

Core Features & Use Cases

  • Port discovery & live host detection: quickly identify reachable services to map attack surface.
  • Vulnerability scanning: run CVE and configuration checks against targets to surface exploitable issues.
  • SSL/TLS analysis: assess certificate validity, expiration, and TLS configurations for secure communications.
  • Use Case: Security teams perform regular audits of web apps and APIs to maintain compliance and reduce risk.

Quick Start

Scan a target by performing port discovery, vulnerability checks, and SSL configuration evaluation to produce a unified security report.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an automated vulnerability scan on a web application?▼

Automated vulnerability scans on web apps detect open ports, CVEs, and SSL issues by integrating tools like nmap and nuclei. This process maps the attack surface and outputs a consolidated report with actionable remediation steps.

Can I use nmap and nuclei to check for SSL misconfigurations in production?▼

Yes, nmap and nuclei can assess SSL misconfigurations in production when paired with sslscan. The scan evaluates certificate validity and TLS configurations to identify exploitable weaknesses and secure communications.

What is the best way to detect CVEs and open ports across staging environments?▼

Detecting CVEs and open ports across staging requires automated port discovery and vulnerability checks. Running these scans identifies reachable services and surfaces exploitable issues to help teams reduce risk early.

Does automated security scanning work for APIs and infrastructure?▼

Automated security scanning works for APIs and infrastructure by performing live host detection and configuration checks. It identifies misconfigurations and vulnerabilities across development and production environments to maintain compliance.

Do I need to install sslscan to evaluate certificate expiration and TLS configurations?▼

You need sslscan integration to evaluate certificate expiration and TLS configurations accurately. The tool assesses certificate validity and secure communication protocols to ensure no exploitable SSL issues exist.

Why does my vulnerability report show misconfigurations without actionable remediation?▼

Vulnerability reports show misconfigurations without actionable remediation when scans lack consolidated output formatting. Proper integration produces a unified security report detailing specific CVEs and steps to fix exposed weaknesses.

Related Skills

Explore More Software Engineering Skills→
0x0pointer0x0pointer
13

ssl-tls-audit

Audit TLS/SSL configurations across multiple ports and map findings to compliance frameworks.

Official
Advanced
josavicentevwjosavicentevw
1

devsecops

Automate security scanning and governance across CI/CD pipelines and compliance workflows.

Community
Advanced
bpnrockstarbpnrockstar

enterprise-vpn-attack

Fingerprint SSL VPN appliances and match CVEs for exploit detection.

Community
Advanced
EojEdredEojEdred

security-hardening

Scan code and configurations for security vulnerabilities and replay risks.

Community
Intermediate