nmap

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent for an nmap-based scanner and its package-install guidance is benign, but it equips the agent with offensive network-scanning capability and references unreviewed local wrapper scripts. The load-time commands are benign environment checks, not malware. Main added concern is the optional `vulners` NSE lookup sending scan-derived data to a third-party service.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Oct 11, 2026, 11:57 AM
Package URL
pkg:socket/skills-sh/patrykquantumnomad%2Fnetworking-tools%2Fnmap%2F@64b716a400995c48d2704af88aa5b971e7a87b1ce05894a65279a360e9eeb2bf