implementing-vulnerability-management-with-greenbone

Deploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library to create scan targets, execute vulnerability scans, and parse scan reports via GMP protocol.

Jump to install

Repository: autohandai/community-skills
Last source activity: March 16, 2026 at 00:59
Detected SKILL.md language: English
Stars: 10
Forks: 3

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/autohandai/community-skills --skill implementing-vulnerability-management-with-greenbone

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer

4 files

SKILL.md

Source instructions · Read-only preview

Back to search Back to installation

Implementing Vulnerability Management with Greenbone

Overview

Greenbone Vulnerability Management (GVM) is the open-source framework behind OpenVAS, providing comprehensive vulnerability scanning with over 100,000 Network Vulnerability Tests (NVTs). The python-gvm library provides a Python API to interact with GVM through the Greenbone Management Protocol (GMP), enabling programmatic creation of scan targets, task management, scan execution, and report retrieval. This skill covers connecting to GVM via Unix socket or TLS, authenticating, creating scan configs and targets, launching scans, and parsing XML-based vulnerability reports to produce actionable findings.

Prerequisites

Greenbone Community Edition or Greenbone Enterprise Appliance installed

Python 3.9+ with python-gvm (pip install python-gvm)

GMP access credentials (username/password)

Network connectivity to GVM daemon (Unix socket or TCP/TLS)

Understanding of CVSS scoring and vulnerability classification

Steps

Install python-gvm: pip install python-gvm

Establish a GMP connection via UnixSocketConnection or TLSConnection

Authenticate with gmp.authenticate(username, password)

Create a target with gmp.create_target(name, hosts=[...], port_list_id=...)

Create a scan task with gmp.create_task(name, config_id, target_id, scanner_id)

Start the scan with gmp.start_task(task_id)

Monitor scan progress with gmp.get_task(task_id)

Retrieve results with gmp.get_report(report_id, report_format_id=...)

Parse the XML report for vulnerabilities, CVSS scores, and affected hosts

Generate a JSON summary report with severity distribution and remediation priorities

Expected Output

A JSON report containing total vulnerabilities found, severity breakdown (critical/high/medium/low), per-host findings with CVE references and CVSS scores, and scan metadata including duration and NVT feed version.