security-scanner

Scan web apps, APIs, and infrastructure for vulnerabilities and misconfigurations.

6|1|Updated Jan 17, 2026

Search Tags:#security #vulnerability #scanning #nmap #ssl #nuclei #web-app

Ready to run

npx skills add https://github.com/issdandavis/SCBE-AETHERMOORE --skill security-scanner-issdandavis

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scanner
Source: https://github.com/issdandavis/SCBE-AETHERMOORE/tree/main/training-data/clawhub-skills/security-scanner
Command: npx skills add https://github.com/issdandavis/SCBE-AETHERMOORE --skill security-scanner-issdandavis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automated security scanning and vulnerability detection for web applications, APIs, and infrastructure, helping teams identify weaknesses and misconfigurations early.

Core Features & Use Cases

Port discovery & live host detection: quickly identify reachable services to map attack surface.
Vulnerability scanning: run CVE and configuration checks against targets to surface exploitable issues.
SSL/TLS analysis: assess certificate validity, expiration, and TLS configurations for secure communications.
Use Case: Security teams perform regular audits of web apps and APIs to maintain compliance and reduce risk.

Quick Start

Scan a target by performing port discovery, vulnerability checks, and SSL configuration evaluation to produce a unified security report.

Frequently Asked Questions about security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run an automated vulnerability scan on a web application?▼

Automated vulnerability scans on web apps detect open ports, CVEs, and SSL issues by integrating tools like nmap and nuclei. This process maps the attack surface and outputs a consolidated report with actionable remediation steps.

Can I use nmap and nuclei to check for SSL misconfigurations in production?▼

Yes, nmap and nuclei can assess SSL misconfigurations in production when paired with sslscan. The scan evaluates certificate validity and TLS configurations to identify exploitable weaknesses and secure communications.

What is the best way to detect CVEs and open ports across staging environments?▼

Detecting CVEs and open ports across staging requires automated port discovery and vulnerability checks. Running these scans identifies reachable services and surfaces exploitable issues to help teams reduce risk early.

Does automated security scanning work for APIs and infrastructure?▼

Automated security scanning works for APIs and infrastructure by performing live host detection and configuration checks. It identifies misconfigurations and vulnerabilities across development and production environments to maintain compliance.

Do I need to install sslscan to evaluate certificate expiration and TLS configurations?▼

You need sslscan integration to evaluate certificate expiration and TLS configurations accurately. The tool assesses certificate validity and secure communication protocols to ensure no exploitable SSL issues exist.

Why does my vulnerability report show misconfigurations without actionable remediation?▼

Vulnerability reports show misconfigurations without actionable remediation when scans lack consolidated output formatting. Proper integration produces a unified security report detailing specific CVEs and steps to fix exposed weaknesses.