scanning-network-with-nmap-advanced

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions and scripts utilize the nmap utility to perform network discovery, port scanning, and vulnerability detection. The scripts/agent.py file automates these tasks by wrapping the Nmap command line.
  • [PRIVILEGE_ESCALATION]: The skill documentation correctly identifies that sudo or root privileges are required for advanced Nmap features such as TCP SYN scans and OS detection, which require raw packet manipulation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and report on data from external network services (such as service banners and version strings) which are untrusted.
  • Ingestion points: scripts/agent.py processes results from Nmap scans in the scan_ports, service_version_scan, and vuln_scan functions.
  • Boundary markers: There are no specific boundary markers or instructions to the agent to treat scan results as untrusted content.
  • Capability inventory: The script has capabilities to perform network requests (via Nmap) and write results to JSON/CSV files on the local filesystem.
  • Sanitization: No explicit sanitization or filtering is performed on strings retrieved from remote network services before they are included in output files.
  • [EXTERNAL_DOWNLOADS]: The skill requires the python-nmap library from PyPI and refers to external resources like the Nmap Reference Guide and community parsing tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:08 AM