vulnerability-scanning--assessment

# Vulnerability Scanning & Assessment ## Purpose Enable Claude to perform comprehensive vulnerability assessments by directly analyzing dependency files, configuration files, and scan output — then generating prioritized, actionable reports. Claude identifies vulnerabilities, calculates risk, and prescribes remediation with version specifics. --- ## Activation Triggers This skill activates when the user asks about: - Scanning dependencies for known CVEs - Auditing `requirements.txt`, `package.json`, `go.mod`, `pom.xml`, `Cargo.toml` - Reviewing server configurations for security issues - CVSS scoring or severity calculation - Vulnerability assessment or security audit reports - Checking software versions against known exploits - Configuration hardening for nginx, Apache, SSH, Docker, Kubernetes - NVD, OSV, or CVE database queries --- ## Prerequisites ```bash pip install requests packaging jinja2 pyyaml ``` **Optional enhanced tools:** - `nuclei` — Template-based vulnerability scanner - `trivy` — Container and filesystem scanner - `nmap` with NSE scripts — Network vuln scanning - `openvas` — Full vulnerability management --- ## Core Capabilities ### 1. Dependency Vulnerability Auditing Claude can directly read and analyze dependency files: **When the user asks to audit dependencies:** 1. **Read the dependency file** using Claude's Read tool or ask the user to paste it 2. **Identify package manager** from file format: - `requirements.txt` / `Pipfile.lock` / `p...