Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

Vulnerability Scanning & Assessment

Audits dependency and config files for known CVEs, scores them with CVSS/EPSS/KEV, and produces a prioritized remediation report.

Security & ReviewIntermediate★ 345⑂ 62AI score 9/10Last updated: Aug 9, 2026

What it does

  • Reads requirements.txt, package.json, go.mod, pom.xml, Cargo.toml and more, extracts exact versions, and cross-references NVD/OSV/GitHub Advisory data.
  • Audits nginx, sshd_config, Dockerfile, and Kubernetes manifests against line-by-line hardening checklists.
  • Calculates CVSS v3.1/4.0 scores and blends them with EPSS exploit probability, CISA KEV membership, and reachability to set patch order.
  • Fills in a full report template: executive summary, severity counts, detailed findings, and a remediation roadmap with effort estimates.
  • Parses Nmap output, maps service versions to CVEs, and suggests targeted NSE scripts.

Who it's for

  • Backend/platform engineers clearing dependency risk before a release.
  • DevOps and infra engineers hardening servers, containers, and clusters.
  • Security analysts and pentesters who want consistent, CVSS-backed reporting.

Examples

  1. "Audit this package-lock.json and list only critical/high issues" → CVE table with affected and minimum safe versions.
  2. "Review my nginx.conf for security problems" → flags legacy TLS, missing headers, exposed version tokens with fixes.
  3. "Score AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H and rank it against our other CVEs using EPSS and KEV."

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/Masriyan/Claude-Code-CyberSecurity-Skill/HEAD/skills/02-vulnerability-scanner/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the skills/02-vulnerability-scanner folder from the GitHub repo Masriyan/Claude-Code-CyberSecurity-Skill into my ~/.claude/skills/vulnerability-scanning-assessment/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill.git && mkdir -p ~/.claude/skills && cp -r Claude-Code-CyberSecurity-Skill/skills/02-vulnerability-scanner ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal in your working directory.
  2. Clone the repo: git clone https://github.com/Masriyan/Claude-Code-CyberSecurity-Skill.git
  3. Create the skills folder: mkdir -p ~/.claude/skills
  4. Copy this skill: cp -r Claude-Code-CyberSecurity-Skill/skills/02-vulnerability-scanner ~/.claude/skills/
  5. Install Python deps: pip install requests packaging jinja2 pyyaml
  6. Optionally install trivy, nuclei, and nmap for deeper scanning.
  7. Restart Claude Code and try: "Audit my requirements.txt for vulnerabilities."
  8. Only scan systems you own or have written authorization to test.
View source on GitHub ↗License: MIT