skills.rest
Greenmamba29
Greenmamba29COMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanner

Scans dependencies, images, and infrastructure for known CVEs and vulnerabilities.

Updated Feb 18, 2026
Search Tags:#security#vulnerability#container security#cve#dependency scanning#infrastructure audit
One-click install
npx skills add https://github.com/Greenmamba29/skillsdotmd_web --skill vulnerability-scanner-greenmamba29
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanner
Source: https://github.com/Greenmamba29/skillsdotmd_web/tree/main/.agents/skills/vulnerability-scanner
Command: npx skills add https://github.com/Greenmamba29/skillsdotmd_web --skill vulnerability-scanner-greenmamba29

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities within an application's dependencies, container images, and infrastructure configurations, preventing potential breaches and ensuring compliance.

Core Features & Use Cases

  • Dependency Scanning: Detects known vulnerabilities in package manifests (e.g., package.json, requirements.txt).
  • Container Image Auditing: Scans container images against comprehensive CVE databases.
  • Infrastructure Misconfiguration Checks: Audits configurations for security weaknesses.
  • Prioritization: Ranks vulnerabilities by severity (CVSS).
  • Remediation Guidance: Provides actionable steps, including automated fix suggestions and Dependabot-compatible PRs.
  • Reporting: Generates both executive summaries and detailed technical reports.
  • Use Case: A development team can use this skill to automatically scan their Node.js application's dependencies before merging code, ensuring no critical vulnerabilities are introduced into production.

Quick Start

Scan the Node.js application in the current directory for vulnerable npm packages and provide remediation suggestions.

Frequently Asked Questions about vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan application dependencies for known CVEs before merging code?▼

To scan dependencies for CVEs, this Skill analyzes package manifests like package.json and requirements.txt, detecting known vulnerabilities and providing automated remediation suggestions to prevent critical risks from entering production.

Can I audit container images for security vulnerabilities and misconfigurations?▼

Yes, you can audit container images for security vulnerabilities. The Skill scans images against comprehensive CVE databases and checks infrastructure configurations for security weaknesses, ranking all findings by CVSS severity.

Do I need a specific runtime environment to run dependency and infrastructure security scans?▼

Yes, you need a Ubuntu runtime environment to execute security scans. This specific environment is required for the Skill to properly analyze dependencies, container images, and infrastructure configurations for known vulnerabilities.

What's the best way to prioritize security vulnerabilities and generate remediation guidance?▼

The best way to prioritize vulnerabilities is by CVSS severity. This Skill ranks identified CVEs accordingly and generates actionable remediation guidance, including Dependabot-compatible fix PRs, alongside executive and technical reports.

Does vulnerability scanning provide automated fix suggestions for Node.js applications?▼

Yes, vulnerability scanning provides automated fix suggestions for Node.js applications. It detects vulnerable npm packages in your manifests and supplies Dependabot-compatible fix PRs to automate the remediation process.

Related Skills

Explore More Software Engineering Skills→
dhruvinrsonidhruvinrsoni

dependency-analysis

Analyze project dependencies by building graphs and detecting circular references.

Community
Advanced
devtintdevtint

report-generation

Generate structured penetration testing reports with CVSS scores and remediation guidance.

Community
Advanced
arbazkhan971arbazkhan971
26

devsecops

Integrate security scanning into CI/CD pipelines with blocking gates.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

security

Scan code, containers, and infrastructure for security vulnerabilities.

Community
Advanced