skills.rest
GhostPWN
GhostPWNOFFICIAL
Explore all skills by this author →
GitHub

Vulnerability Scanning & Assessment

Audit Python, npm, and Go dependencies plus Nginx and SSHD configurations for known vulnerabilities.

4|Updated Mar 10, 2026
Search Tags:#vulnerability#dependency audit#cvss#hardening#cve#configuration review#osv
One-click install
npx skills add https://github.com/GhostPWN/ghostpwn --skill vulnerability-scanning-assessment
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Vulnerability Scanning & Assessment
Source: https://github.com/GhostPWN/ghostpwn/tree/main/src/skills/02-vulnerability-scanner
Command: npx skills add https://github.com/GhostPWN/ghostpwn --skill vulnerability-scanning-assessment

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) components.

What problem does it solve?

It removes the manual burden of checking dependencies and server settings for known security weaknesses, then turns raw findings into prioritized remediation guidance.

Core Features & Use Cases

  • Dependency auditing: Review Python, npm, and Go package manifests for known CVEs and fixed versions.
  • Configuration review: Assess Nginx and SSHD settings for insecure headers, weak authentication, and risky defaults.
  • Risk scoring and reporting: Calculate CVSS v3.1 severity and summarize findings in a clear, remediation-focused report.
  • Use case: A security engineer can scan a project and its server config before release to catch exposed vulnerabilities and hardening gaps.

Quick Start

Ask for a vulnerability assessment of the target project or configuration file and include the dependency manifest or server config you want reviewed.

Frequently Asked Questions about Vulnerability Scanning & Assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Python, npm, and Go dependencies for known CVEs?▼

To audit dependencies for CVEs, you provide Python, npm, or Go package manifests. The Skill uses OSV-backed lookups to identify known vulnerabilities and provides fixed-version guidance for remediation.

How do I check Nginx and SSHD configurations for insecure settings?▼

To check Nginx and SSHD configurations, submit your server config files. A configuration rule engine assesses the settings for insecure headers, weak authentication, and risky defaults to identify hardening gaps.

How are vulnerability scan results scored and prioritized?▼

Vulnerability scan results are scored using CVSS v3.1 metrics. The assessment produces severity-ranked findings and summarizes them in a clear, remediation-focused report to guide security hardening.

Can I review server hardening and dependency vulnerabilities together before release?▼

Yes, you can review both together before release. The assessment covers software manifests and server configurations, catching exposed vulnerabilities and hardening gaps in a single scan.

Do I need to provide a specific file format for the vulnerability assessment?▼

You need to provide dependency manifests for Python, npm, or Go, or text configuration files for Nginx and SSHD. The Skill reviews these inputs to calculate CVSS severity and generate remediation guidance.

Related Skills

Explore More Software Engineering Skills→
treejhtreejh

init

Update AGENTS.md with detected project configuration and development commands.

Community
Intermediate
utkusenutkusen
1.3k

sast-report

Consolidate SAST findings from sast/*-results.md into a prioritized final-report.md.

Community
Intermediate
sgcarstrendssgcarstrends
21

security-audit

Audit codebases for OWASP Top 10 vulnerabilities and generate prioritized remediation reports.

Official
Advanced
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced