home / Security / Vulnerability Scanning Skill by @BagelHole

Vulnerability Scanning Skill by @BagelHole

FREE

github stars★ 1,180updatedJan 2026repo@BagelHole

$git clone https://github.com/BagelHole/DevOps-Security-Agent-Skills

The skill is the security/scanning/vulnerability-scanning folder inside that repository. Copy it into the folder your agent loads skills from; check your agent's documentation for where that is.

about Vulnerability Scanning Skill by @BagelHole

Scan systems and dependencies for CVEs and security vulnerabilities.

our take

Scans systems and dependencies for CVEs using tools such as Nessus, OpenVAS and Qualys, with an OpenVAS Docker setup and guidance on prioritising findings.

when to use it

You run regular vulnerability assessments
You need to prioritise a long list of CVEs
You want an OpenVAS scanner set up quickly

before you install

Scan only systems you are authorised to scan
Severity scores need context about what is actually exposed

what's inside

The original SKILL.md is organised into these sections:

When to Use This Skill
Prerequisites
Vulnerability Scanning Tools
OpenVAS Setup
Docker Deployment
Scanning Commands
Nessus
API Usage
Nuclei
Installation
Basic Scanning
Custom Templates

source and license

Written and maintained by @BagelHole. It is published under the MIT license, which allows reuse with attribution. SkillDirectory does not claim authorship: this page adds our own review and links back to the original, and the skill's text belongs to its author.

View the full SKILL.md on GitHub ↗

Read the opening of the original SKILL.md

# Vulnerability Scanning

Identify and prioritize security vulnerabilities across infrastructure and applications.

## When to Use This Skill

Use this skill when:
- Performing security assessments
- Implementing vulnerability management programs
- Meeting compliance requirements
- Triaging and prioritizing remediation
- Scanning infrastructure for known CVEs

## Prerequisites

- Access to scanning tools
- Network access to targets
- Appropriate authorization

## Vulnerability Scanning Tools

| Tool | Type | Best For |
|------|------|----------|
| Nessus | Commercial | Enterprise scanning |
| OpenVAS | Open Source | Free alternative |
| Qualys | Cloud SaaS | Large scale |
| Nexpose/InsightVM | Commercial | Asset management |
| Nuclei | Open Source | Template-based |

## OpenVAS Setup

### Docker Deployment

```bash
# Run OpenVAS container
docker run -d --name openvas \
  -p 443:443 \
  -v openvas-data:/data \
  greenbone/openvas-scanner

# Access web UI at https://localhost
…

Excerpt only, quoted from the author's repository. Open the repository for the complete file.

↓ download .zip