skills/mukul975/anthropic-cybersecurity-skills/scanning-network-with-nmap-advanced/Gen Agent Trust Hub
scanning-network-with-nmap-advanced
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions and scripts utilize the
nmaputility to perform network discovery, port scanning, and vulnerability detection. Thescripts/agent.pyfile automates these tasks by wrapping the Nmap command line. - [PRIVILEGE_ESCALATION]: The skill documentation correctly identifies that
sudoor root privileges are required for advanced Nmap features such as TCP SYN scans and OS detection, which require raw packet manipulation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and report on data from external network services (such as service banners and version strings) which are untrusted.
- Ingestion points:
scripts/agent.pyprocesses results from Nmap scans in thescan_ports,service_version_scan, andvuln_scanfunctions. - Boundary markers: There are no specific boundary markers or instructions to the agent to treat scan results as untrusted content.
- Capability inventory: The script has capabilities to perform network requests (via Nmap) and write results to JSON/CSV files on the local filesystem.
- Sanitization: No explicit sanitization or filtering is performed on strings retrieved from remote network services before they are included in output files.
- [EXTERNAL_DOWNLOADS]: The skill requires the
python-nmaplibrary from PyPI and refers to external resources like the Nmap Reference Guide and community parsing tools.
Audit Metadata