vulnerability-scanning--assessment

Featured

Dependency auditing, CVE detection, configuration security review, CVSS scoring, and prioritized vulnerability reporting

Data & Documents 207 stars 38 forks Updated 1 weeks ago MIT

Install

View on GitHub

Quality Score: 91/100

Stars 20%
77
Recency 20%
90
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
80
License 10%
100
Description 5%
100

Skill Content

# Vulnerability Scanning & Assessment ## Purpose Enable Claude to perform comprehensive vulnerability assessments by directly analyzing dependency files, configuration files, and scan output — then generating prioritized, actionable reports. Claude identifies vulnerabilities, calculates risk, and prescribes remediation with version specifics. --- ## Activation Triggers This skill activates when the user asks about: - Scanning dependencies for known CVEs - Auditing `requirements.txt`, `package.json`, `go.mod`, `pom.xml`, `Cargo.toml` - Reviewing server configurations for security issues - CVSS scoring or severity calculation - Vulnerability assessment or security audit reports - Checking software versions against known exploits - Configuration hardening for nginx, Apache, SSH, Docker, Kubernetes - NVD, OSV, or CVE database queries --- ## Prerequisites ```bash pip install requests packaging jinja2 pyyaml ``` **Optional enhanced tools:** - `nuclei` — Template-based vulnerability scanner - `trivy` — Container and filesystem scanner - `nmap` with NSE scripts — Network vuln scanning - `openvas` — Full vulnerability management --- ## Core Capabilities ### 1. Dependency Vulnerability Auditing Claude can directly read and analyze dependency files: **When the user asks to audit dependencies:** 1. **Read the dependency file** using Claude's Read tool or ask the user to paste it 2. **Identify package manager** from file format: - `requirements.txt` / `Pipfile.lock` / `p...

Details

Author
Masriyan
Repository
Masriyan/Claude-Code-CyberSecurity-Skill
Created
5 months ago
Last Updated
1 weeks ago
Language
Python
License
MIT

Integrates with

Kubernetes · Infrastructure

Bundled in these plugins

Claude-Code-CyberSecurity-Skill

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Listed

vuln-scan

Use this skill when the user runs /ievo:vuln-scan, asks to scan for vulnerabilities, or says "security scan my code" — not for auditing a third-party skill/plugin before installation (use /ievo:security-check for that). CWE-aware deep source code vulnerability scan for a single module or file set, inspired by Project Glasswing. Uses AI reasoning (not regex) to trace data flows, detect vulnerabilities, and validate findings via complete exploit chains. Every finding requires an attack narrative (entry point, data flow, impact); no chain means no finding. Applied per-module by the vuln-scanner agent, orchestrated by the /ievo:vuln-scan command. Covers OWASP top 10, CWE-anchored threat taxonomy (injection, auth bypass, crypto misuse, data exposure, race conditions, deserialization, path traversal, SSRF, business logic, supply chain).

0 Updated today
ievo-ai
AI & Automation Solid

code-vuln-audit

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL injection, XSS, or command injection. Use when the user mentions security scans, vulnerability detection, secret leaks, API keys, OWASP, npm audit, pip-audit, hardcoded passwords, or code security checks.

4 Updated 1 weeks ago
serejaris
AI & Automation Featured

code-vuln-audit

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL injection, XSS, or command injection. Use when the user mentions security scans, vulnerability detection, secret leaks, API keys, OWASP, npm audit, pip-audit, hardcoded passwords, or code security checks.

4,441 Updated 2 days ago
zebbern