skills.rest
ToanPV90
ToanPV90COMMUNITY
Explore all skills by this author →
GitHub

vulnerability-scanning

Automate vulnerability discovery and prioritization across infrastructure, dependencies, and repositories.

Updated Apr 15, 2026
Search Tags:#vulnerability management#security assessment#trivy#nuclei#openvas#cve scanning#ci security
One-click install
npx skills add https://github.com/ToanPV90/dotfiles --skill vulnerability-scanning-toanpv90
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanning
Source: https://github.com/ToanPV90/dotfiles/tree/main/agents/.agents/skills/vulnerability-scanning
Command: npx skills add https://github.com/ToanPV90/dotfiles --skill vulnerability-scanning-toanpv90

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This skill helps you identify known security vulnerabilities and misconfigurations across systems and dependencies so you can prioritize remediation instead of guessing.

Core Features & Use Cases

  • Vulnerability assessment across platforms: Run scanning workflows for infrastructure, containers, repositories, and dependencies to surface CVEs and risk signals.
  • Tool-driven scanning options: Supports common scanners such as OpenVAS/Nessus/Qualys for enterprise-style assessments and Nuclei for template-based detection.
  • Actionable prioritization: Uses CVSS-based severity guidance and workflow steps to triage findings, validate results, and plan remediation.

Quick Start

Run the repository vulnerability scan on a target directory by executing scan-repo.sh with the directory path argument you want to audit.

Frequently Asked Questions about vulnerability-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a vulnerability scan on my application dependencies?▼

Run a vulnerability scan on your application dependencies by executing the scan-repo.sh script with your target directory path as the argument. This automates vulnerability discovery across repository contents to surface CVEs and risk signals.

What is the best way to prioritize security vulnerabilities after a scan?▼

Prioritize security vulnerabilities using CVSS-based severity guidance provided in the workflow. The skill applies severity filters to triage findings, validate results, and produce review-ready outputs for planning remediation.

Does this workflow support scanning with Trivy, Nuclei, and OpenVAS?▼

Yes, the workflow supports scanning with common scanners including Trivy, Nuclei, and OpenVAS. It applies documented commands and configuration files to run tool-driven detection for infrastructure, containers, and dependencies.

Can I use vulnerability scanning for CI-driven detection of critical issues?▼

Yes, you can use this vulnerability scanning workflow for CI-driven detection. It applies severity filters to identify critical and high issues during CI security workflows, satisfying compliance and assessment requirements.

How does template-based detection work for security assessments?▼

Template-based detection works by using Nuclei templates to identify known security vulnerabilities and misconfigurations across systems. This approach helps surface risk signals so you can prioritize remediation instead of guessing.

Related Skills

Explore More Legal & Compliance Skills→
tneztnez

bootstrap

Initialize the .docent directory structure and configuration for new projects.

Community
Basic
EastSwordEastSword
52

security_reporter

Generate standardized security vulnerability analysis reports with CVSS 3.1 scoring.

Community
Advanced
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced
BagelHoleBagelHole
46

vulnerability-scanning

Scan systems and dependencies for CVEs using Nessus, OpenVAS, and Qualys.

Community
Intermediate