nmap
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell command examples for running the Nmap network scanner with various flags for host discovery, port scanning, and version detection. These are standard features of the documented tool.
- [PRIVILEGE_ESCALATION]: The documentation explicitly mentions that certain scan types, such as TCP SYN stealth scans (-sS) and OS detection (-O), require root or administrative privileges to execute.
- [INDIRECT_PROMPT_INJECTION]: The skill documents procedures for ingesting untrusted data from external network targets, which represents a potential indirect prompt injection surface.
- Ingestion points: The agent is instructed to process network service banners, HTTP headers, and protocol responses returned by Nmap and its scripting engine (NSE).
- Boundary markers: No delimiters or specific safety instructions are provided to separate tool output from the agent's core logic.
- Capability inventory: The skill utilizes the Nmap command-line tool which can perform network operations and write scan results to local files in various formats (-oA, -oX).
- Sanitization: No explicit sanitization or filtering of network-received data is described.
Audit Metadata