Skip to content
Get packs

DefectDojo Vulnerability Dashboard

Set up DefectDojo to consolidate scanner findings, deduplicate them, and track remediation via its API

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
7 files

What it does

This skill gives the agent a playbook for deploying DefectDojo, an open-source vulnerability management platform, and feeding it results from many security scanners such as Nessus, ZAP, Trivy and Semgrep. Once installed, the agent can walk you through creating the product and engagement structure, uploading scan reports through the REST API, wiring up Jira ticketing and Slack alerts, and pulling finding counts for dashboards. It also includes two Python scripts that query and automate DefectDojo through its API.

Great for

  • Security or DevOps teams that want one place to see vulnerabilities from several scanners
  • Engineers automating scan uploads from CI/CD pipelines into DefectDojo
  • Teams that need vulnerability metrics or executive reports from scanner output

Skip it if

  • Teams that only run a single scanner and do not need consolidation (the tool adds significant infrastructure overhead)
  • Environments where scripts are not allowed to run or where credentials cannot be placed in environment variables, since the scripts read API keys from the environment and the examples contain hardcoded placeholder passwords and keys
  • Anyone expecting a turnkey, production-hardened deployment: the SKILL.md sets DD_ALLOWED_HOSTS=* and the scripts are minimal examples

Try asking

  • “Set up DefectDojo with Docker Compose and create a product type, product and engagement for our customer portal”
  • “Show me how to upload a Trivy JSON report and a ZAP XML report into an existing DefectDojo engagement”
  • “Write a GitHub Actions step that sends Semgrep results to DefectDojo after each push”
  • “Pull open critical and high findings from DefectDojo and summarize them for an executive report”
Step-by-step guide: how to use DefectDojo Vulnerability DashboardInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.

    building-vulnerability-dashboard-with-defectdojo.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip building-vulnerability-dashboard-with-defectdojo.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip building-vulnerability-dashboard-with-defectdojo.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Store the API key and database secrets in environment variables or a secrets manager rather than pasting them into prompts or code; replace DD_ALLOWED_HOSTS=* with your real hostname before exposing the instance
  • Review scripts/agent.py and scripts/process.py before running them, since they make authenticated HTTP requests to whatever DefectDojo URL is configured
  • Test the workflow against a local or staging DefectDojo instance before pointing it at production scanner data

What's inside

  • assets/template.md
  • references/api-reference.md
  • references/standards.md
  • references/workflows.md
  • scripts/agent.py
  • scripts/process.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.