The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses sudo systemctl to manage the nessusd service and nessuscli for administrative tasks such as updating plugins and verifying configuration.
[CREDENTIALS_UNSAFE]: Example API requests contain hardcoded placeholder credentials ("password":"password"). While intended as placeholders, using them in shell commands can expose them in the system's command history.
[EXTERNAL_DOWNLOADS]: The nessuscli update command is used to fetch vulnerability definition plugins from Tenable's official update servers, which is a standard operation for maintaining an up-to-date scanner.
[COMMAND_EXECUTION]: The workflow includes curl -k to interact with the Nessus REST API on localhost. This bypasses TLS certificate verification, a common but insecure practice for local services with self-signed certificates.

scanning-infrastructure-with-nessus