Skip to content
Get packs

Vulnerability Scanning Workflow

Guides an agent to set up recurring vulnerability scans, prioritize findings, and track remediation SLAs

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
3 files

What it does

Once installed, the agent can help a security team plan a recurring vulnerability scanning program using scanners such as Nessus, Qualys, and OpenVAS. It provides code patterns to create scans, export results, rank findings by combining CVSS severity, asset criticality, and whether the flaw is on CISA's known-exploited list, and assign remediation deadlines by priority tier. It also includes a sample SIEM search to flag vulnerabilities that are being actively probed. A bundled Python script can run an Nmap-based scan and fetch the CISA catalog.

Great for

  • SOC or security engineers setting up a recurring vulnerability assessment process
  • Teams that want risk-based prioritization beyond raw CVSS scores
  • Analysts who want a starting template for SLA-based remediation tracking

Skip it if

  • Penetration testing or active exploitation: the skill itself says scanning identifies weaknesses while pen testing validates exploitability, and it should not be used for the latter
  • Running scans against networks you do not own or have written authorization to scan, since the bundled script actively probes hosts

Try asking

  • “Help me design a weekly credentialed vulnerability scan for our server and workstation subnets using Nessus”
  • “Rank these scan results by CVSS, asset criticality, and CISA KEV status”
  • “Draft remediation SLAs for P1 through P5 findings in our environment”
  • “Write a Splunk search that correlates scan findings with IDS alerts”
Step-by-step guide: how to use Vulnerability Scanning WorkflowInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the Apache-2.0 licence and an attribution note.

    building-vulnerability-scanning-workflow.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip building-vulnerability-scanning-workflow.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip building-vulnerability-scanning-workflow.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only point the scanning code at IP ranges you are authorized to test, and confirm scope with the asset owner first
  • Keep scanner credentials in environment variables or a secrets manager rather than hard-coding them; the examples contain placeholder passwords
  • Review the SKIP_TLS_VERIFY option carefully: it disables certificate checks and should be used only in isolated lab environments

What's inside

  • references/api-reference.md
  • scripts/agent.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.