DefectDojo Vulnerability Management

DefectDojo Vulnerability Management is a DevOps skill for Claude Code, published by AgentSecOps in SecOpsAgentKit.

204 stars39 forkson AgentSecOps/SecOpsAgentKitAdded 2026/09/05+1% in starsRepository updated 2026/04/15

agentsai-agentsanthropicappsecclaude-codedastdevsecopsllm-toolssastsecuritysecurity-automationsecurity-toolsshift-leftvulnerability-scanning

Install in seconds

Install DefectDojo Vulnerability Management

Copy DefectDojo Vulnerability Management into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/devsecops/vuln-defectdojo ~/.claude/skills/vuln-defectdojo

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/AgentSecOps/SecOpsAgentKit.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/devsecops/vuln-defectdojo/SKILL.md in AgentSecOps/SecOpsAgentKit
Installs to: ~/.claude/skills/vuln-defectdojo
Collection: One of 25 skills cataloged from this repository
Category: DevOps — 973 skills

What DefectDojo Vulnerability Management does

DefectDojo Vulnerability Management aggregates scanner findings into DefectDojo for deduplication, SLA tracking, and compliance reporting. Use it to manage vulnerability backlogs and remediation across products, teams, and pipelines.

DefectDojo Vulnerability Management is cataloged under DevOps on DirSkills. DefectDojo Vulnerability Management comes from a repository tagged agents, ai-agents, anthropic, appsec and claude-code.

Documentation

README

Excerpt

Vulnerability Management with DefectDojo

Overview

DefectDojo aggregates findings from every SecOpsAgentKit scanner into one platform—deduplicating across tools, tracking SLA compliance, and producing compliance-ready reports. It transforms isolated scanner outputs into a managed vulnerability backlog with ownership and remediation history.

Key concepts:

Product: An application or system being tracked
Engagement: A time-boxed security activity (sprint, assessment, CI/CD pipeline)
Test: A scanner run within an engagement
Finding: A deduplicated security issue with full lifecycle (Active → Mitigated → Closed)

Quick Start

This is the opening of the README. Read the full README on GitHub.

Frequently asked about DefectDojo Vulnerability Management

What else does AgentSecOps publish alongside DefectDojo Vulnerability Management?
DefectDojo Vulnerability Management is one of 25 skills that DirSkills catalogs from AgentSecOps/SecOpsAgentKit, the repository it ships in. Its siblings there include Api Spectral, Bandit Python SAST and Black Duck SCA. Each one is a separate skill with its own page in this directory, installs the same way DefectDojo Vulnerability Management does, and is maintained by AgentSecOps in that same repository. The rest of the collection is listed on the AgentSecOps/SecOpsAgentKit page.
How does DefectDojo Vulnerability Management compare to other DevOps skills?
DefectDojo Vulnerability Management ranks #854 by stars among the 973 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of DefectDojo Vulnerability Management against them. Open each page to compare what they document and how they install.