scanner-tuning
From the author
Tunes vulnerability scanners to reduce false positives, optimize scan policies, and improve result accuracy. Covers false positive identification patterns, scan policy configuration, authenticated vs unauthenticated scanning tradeoffs, severity override criteria, plugin/check selection, scan scheduling, and result correlation across multiple scanners. Uses CVSS 4.0 for severity validation and CWE for vulnerability classification.
Install
npx skills add UnitOneAI/SecuritySkills --skill scanner-tuning -a claude-code
Installs to .claude/skills/scanner-tuning/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
- Uses sudoLow
Why 76
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- vulnerability-scanningsecondsky/claude-skillsAutomated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit. Use for CI/CD security gates, pre-deployment audits, compliance requirements, or encountering CVE detection, outdated packages, license compliance, SBOM generation errors.Security★ 236
- implementing-siem-use-case-tuning26zl/cybersec-toolkitTune SIEM detection rules to reduce false positives by analyzing alert volumes, creating whitelists, adjusting thresholds, and measuring detection efficacy metrics in Splunk and ElasticOther★ 82
- siem-alerttonone-ai/tononeTune a SIEM alert — reduce false positives, add context, and improve analyst experience. Use when asked to "tune this alert", "we have too many false positives", or "improve alert quality".Productivity★ 76
- 02-vulnerability-scannerMasriyan/Claude-Code-CyberSecurity-SkillDependency auditing, CVE detection, configuration security review, CVSS scoring, and prioritized vulnerability reportingSecurity★ 512
- absolute-auditmaddhruv/absoluteVulnerability and security scan (defensive, your own repo): dependency CVEs plus risky code patterns (secrets, injection, weak authz), severity x reachability triaged and remediated without suppressing. Complements the built-in /security-review. Triggers on "absolute audit", "security audit", "are we vulnerable", "scan for CVEs", "check for secrets/injection", "harden this".Security★ 223
- scanning-toolszebbern/claude-code-guideThis skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware", "check cloud security", or "evaluate system compliance". It provides comprehensive guidance on security scanning tools and methodologies.Security★ 4.7K
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in