skills.rest
tylern91
tylern91COMMUNITY
Explore all skills by this author →
WebsiteGitHub

vulnerability-scanning

Identify and prioritize security vulnerabilities across infrastructure and applications.

Updated Aug 23, 2026
Search Tags:#security#vulnerability#remediation#compliance#assessment#scanning
One-click install
npx skills add https://github.com/tylern91/dotfiles --skill vulnerability-scanning-tylern91
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-scanning
Source: https://github.com/tylern91/dotfiles/tree/main/agents/.agents/skills/vulnerability-scanning
Command: npx skills add https://github.com/tylern91/dotfiles --skill vulnerability-scanning-tylern91

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires trivy, grype, docker, gitleaks, tfsec, kubesec, pip-audit, npm, docker-scout, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Vulnerability scanning helps teams identify and prioritize security weaknesses across infrastructure and applications, enabling proactive remediation and reduced risk.

Core Features & Use Cases

  • Comprehensive assessment: Detect CVEs, misconfigurations, and policy violations across networks, cloud, containers, and on-prem assets.
  • Prioritization & remediation: Rank findings by risk and provide actionable remediation guidance for owners and engineers.
  • Use Case: During a security audit, run scans with Nessus, OpenVAS, and Nuclei to surface critical open findings and track remediation progress.

Quick Start

Run a security assessment across your assets to identify and prioritize CVEs and configuration issues.

Frequently Asked Questions about vulnerability-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify and prioritize security vulnerabilities across cloud and on-prem infrastructure?▼

Vulnerability scanning identifies CVEs and misconfigurations across cloud, containers, and on-prem assets. It ranks findings by risk to provide actionable remediation guidance for engineers and stakeholders during security audits.

Can I use trivy and grype to detect CVEs in Docker containers?▼

Yes, trivy and grype are supported dependencies for scanning Docker containers. They detect CVEs and configuration issues, allowing you to surface critical findings and track remediation progress across your infrastructure.

Do I need proper authorization to run security assessments and compliance scanning on network assets?▼

Yes, proper authorization is required to run security assessments and compliance scanning. You must have explicit permission to scan networks, cloud, and on-prem assets to identify vulnerabilities and misconfigurations legally and safely.

What's the best way to scan for misconfigurations in Terraform and Kubernetes deployments?▼

Use tfsec and kubesec to scan for misconfigurations in Terraform and Kubernetes deployments. These dependencies detect policy violations and security weaknesses, providing actionable remediation guidance for infrastructure owners and engineers.

How do I find leaked secrets and vulnerable dependencies in npm and pip projects?▼

Use gitleaks to find leaked secrets and pip-audit or npm to find vulnerable dependencies in your projects. These dependencies detect policy violations and CVEs, enabling proactive remediation and reduced risk across your applications.

Related Skills

Explore More Software Engineering Skills→
jayjpatel9717jayjpatel9717

container-security

Scan Docker images and audit Kubernetes clusters for security vulnerabilities.

Community
Advanced
jeremylongshorejeremylongshore
2.6k

scanning-database-security

Scan PostgreSQL and MySQL databases for security vulnerabilities and generate remediation reports.

Community
Advanced
cbbkrd-techcbbkrd-tech

ln-760-security-setup

Coordinate secret and dependency scans to generate security infrastructure files.

Community
Advanced
BagelHoleBagelHole
46

vulnerability-scanning

Scan systems and dependencies for CVEs using Nessus, OpenVAS, and Qualys.

Community
Intermediate