port-service-discovery

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses nmap, nc (netcat), and curl to perform port scans and banner grabbing on user-specified targets. These are standard network utilities, but their use is a core part of the skill's reconnaissance capabilities.
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to probe HTTP services on open ports and to search for API documentation (e.g., swagger.json). These are standard HTTP requests used for service identification.
  • [SAFE]: The skill's primary purpose is security reconnaissance, which is a legitimate task for security professionals. The techniques used (port scanning, banner grabbing, and basic authentication checks) are well-known and documented. No evidence of data exfiltration to unauthorized third parties or malicious code obfuscation was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 04:46 PM
Security Audit — agent-trust-hub — port-service-discovery