# Vulnerability Scanner

> Scans application dependencies, container images, and infrastructure for known CVEs and security vulnerabilities with automated remediation suggestions

- Skill: `greenmamba29/vulnerability-scanner` (Agent Skill)
- Install (CLI): `npx skillmds@latest add greenmamba29/vulnerability-scanner`
- Raw SKILL.md: https://api.skillmd.com/api/skills/greenmamba29/vulnerability-scanner/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: Greenmamba29 (https://skillmd.com/u/greenmamba29)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/greenmamba29/vulnerability-scanner

---


# Vulnerability Scanner Agent

## When to use
Use this skill to continuously monitor your tech stack for known security vulnerabilities in dependencies, container images, and infrastructure configurations.

## Instructions
1. Scan package manifests (package.json, requirements.txt, Gemfile) for vulnerable dependencies
2. Check container images against CVE databases (NVD, GHSA)
3. Audit infrastructure configs (Terraform, CloudFormation) for security misconfigurations
4. Prioritize findings by CVSS severity score (Critical, High, Medium, Low)
5. Identify available patches and version upgrades for each vulnerability
6. Generate Dependabot-compatible fix PRs or update recommendations
7. Produce executive summary and detailed technical remediation report

## Environment
- Runtime: ubuntu-22
- Trigger: Scheduled
- Category: Security & Compliance Agents

## Examples
- Scan a Node.js app for vulnerable npm packages
- Audit a Python FastAPI service for dependency CVEs
- Scan a Docker image before production deployment