vulnerability-scanning

Automate vulnerability discovery and prioritization across infrastructure, dependencies, and repositories.

Updated Apr 15, 2026

Search Tags:#vulnerability management #security assessment #trivy #nuclei #openvas #cve scanning #ci security

Ready to run

npx skills add https://github.com/ToanPV90/dotfiles --skill vulnerability-scanning-toanpv90

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-scanning
Source: https://github.com/ToanPV90/dotfiles/tree/main/agents/.agents/skills/vulnerability-scanning
Command: npx skills add https://github.com/ToanPV90/dotfiles --skill vulnerability-scanning-toanpv90

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This skill helps you identify known security vulnerabilities and misconfigurations across systems and dependencies so you can prioritize remediation instead of guessing.

Core Features & Use Cases

Vulnerability assessment across platforms: Run scanning workflows for infrastructure, containers, repositories, and dependencies to surface CVEs and risk signals.
Tool-driven scanning options: Supports common scanners such as OpenVAS/Nessus/Qualys for enterprise-style assessments and Nuclei for template-based detection.
Actionable prioritization: Uses CVSS-based severity guidance and workflow steps to triage findings, validate results, and plan remediation.

Quick Start

Run the repository vulnerability scan on a target directory by executing scan-repo.sh with the directory path argument you want to audit.

Frequently Asked Questions about vulnerability-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a vulnerability scan on my application dependencies?▼

Run a vulnerability scan on your application dependencies by executing the scan-repo.sh script with your target directory path as the argument. This automates vulnerability discovery across repository contents to surface CVEs and risk signals.

What is the best way to prioritize security vulnerabilities after a scan?▼

Prioritize security vulnerabilities using CVSS-based severity guidance provided in the workflow. The skill applies severity filters to triage findings, validate results, and produce review-ready outputs for planning remediation.

Does this workflow support scanning with Trivy, Nuclei, and OpenVAS?▼

Yes, the workflow supports scanning with common scanners including Trivy, Nuclei, and OpenVAS. It applies documented commands and configuration files to run tool-driven detection for infrastructure, containers, and dependencies.

Can I use vulnerability scanning for CI-driven detection of critical issues?▼

Yes, you can use this vulnerability scanning workflow for CI-driven detection. It applies severity filters to identify critical and high issues during CI security workflows, satisfying compliance and assessment requirements.

How does template-based detection work for security assessments?▼

Template-based detection works by using Nuclei templates to identify known security vulnerabilities and misconfigurations across systems. This approach helps surface risk signals so you can prioritize remediation instead of guessing.