What it does. Deploy and operate Greenbone/OpenVAS vulnerability management using the Part of mukul975/Anthropic-Cybersecurity-Skills (817 security skills) (mukul975/Anthropic-Cybersecurity-Skills).

Install

• npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-vulnerability-management-with-greenbone, or copy the skill folder into ~/.claude/skills/implementing-vulnerability-management-with-greenbone/.
• Raw file: curl -sL https://raw.githubusercontent.com/mukul975/Anthropic-Cybersecurity-Skills/HEAD/skills/implementing-vulnerability-management-with-greenbone/SKILL.md

SKILL.md (verbatim)

name: implementing-vulnerability-management-with-greenbone
description: Deploy and operate Greenbone/OpenVAS vulnerability management using the
  python-gvm library over the Greenbone Management Protocol (GMP) to connect via
  Unix socket or TLS, create scan targets and configs, execute scans, and parse the
  XML scan reports into actionable findings. Use when automating OpenVAS/GVM scan
  creation and execution, or programmatically retrieving and parsing vulnerability
  scan reports.
domain: cybersecurity
subdomain: vulnerability-management
tags:
- openvas
- greenbone
- vulnerability-scanning
- gmp
- python-gvm
- vulnerability-management
- compliance
version: '1.0'
author: mahipal
license: Apache-2.0
nist_csf:
- ID.RA-01
- ID.RA-02
- ID.IM-02
- ID.RA-06
mitre_attack:
- T1190
- T1203
- T1068
- T1046

Implementing Vulnerability Management with Greenbone

Overview

Greenbone Vulnerability Management (GVM) is the open-source framework behind OpenVAS, providing comprehensive vulnerability scanning with over 100,000 Network Vulnerability Tests (NVTs). The python-gvm library provides a Python API to interact with GVM through the Greenbone Management Protocol (GMP), enabling programmatic creation of scan targets, task management, scan execution, and report retrieval. This skill covers connecting to GVM via Unix socket or TLS, authenticating, creating scan configs and targets, launching scans, and parsing XML-based vulnerability reports to produce actionable findings.

When to Use

• When deploying or configuring implementing vulnerability management with greenbone capabilities in your environment
• When establishing security controls aligned to compliance requirements
• When building or improving security architecture for this domain
• When conducting security assessments that require this implementation

Prerequisites

• Greenbone Community Edition or Greenbone Enterprise Appliance installed
• Python 3.9+ with python-gvm (pip install python-gvm)
• GMP access credentials (username/password)
• Network connectivity to GVM daemon (Unix socket or TCP/TLS)
• Understanding of CVSS scoring and vulnerability classification

Steps

1. Install python-gvm: pip install python-gvm
2. Establish a GMP connection via UnixSocketConnection or TLSConnection
3. Authenticate with gmp.authenticate(username, password)
4. Create a target with gmp.create_target(name, hosts=[...], port_list_id=...)
5. Create a scan task with gmp.create_task(name, config_id, target_id, scanner_id)
6. Start the scan with gmp.start_task(task_id)
7. Monitor scan progress with gmp.get_task(task_id)
8. Retrieve results with gmp.get_report(report_id, report_format_id=...)
9. Parse the XML report for vulnerabilities, CVSS scores, and affected hosts
10. Generate a JSON summary report with severity distribution and remediation priorities

Expected Output

A JSON report containing total vulnerabilities found, severity breakdown (critical/high/medium/low), per-host findings with CVE references and CVSS scores, and scan metadata including duration and NVT feed version.

Other files in this skill

• LICENSE
• references/api-reference.md
• scripts/agent.py

references/api-reference.md (verbatim)

Greenbone/OpenVAS python-gvm API Reference

Installation

pip install python-gvm

Connection Setup

from gvm.connections import UnixSocketConnection, TLSConnection
from gvm.protocols.gmp import Gmp
from gvm.transforms import EtreeTransform

# Unix socket (local)
conn = UnixSocketConnection(path="/run/gvmd/gvmd.sock")
# TLS (remote)
conn = TLSConnection(hostname="gvm-host", port=9390)

transform = EtreeTransform()
with Gmp(connection=conn, transform=transform) as gmp:
    gmp.authenticate("admin", "password")
    version = gmp.get_version()

Core GMP API Methods

Default Resource IDs

Report XML Structure

<report>
  <results>
    <result>
      <host>192.168.1.10</host>
      <name>SSL/TLS Certificate Expired</name>
      <threat>High</threat>
      <severity>7.5</severity>
      <nvt oid="1.3.6.1.4.1.25623.1.0.103955">
        <cve>CVE-2024-12345</cve>
      </nvt>
      <description>The SSL certificate has expired...</description>
    </result>
  </results>
</report>

CLI Usage

python agent.py --input scan_results.json --output report.json
python agent.py --input scan_results.json --host gvm-server --username admin --password secret

References

• python-gvm GitHub: https://github.com/greenbone/python-gvm
• GMP Protocol Docs: https://greenbone.github.io/docs/latest/api.html
• Greenbone Community Docs: https://greenbone.github.io/docs/latest/

Back to mukul975/Anthropic-Cybersecurity-Skills (817 security skills) or Agent skills.