port-service-discovery
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
nmap,nc(netcat), andcurlto perform port scans and banner grabbing on user-specified targets. These are standard network utilities, but their use is a core part of the skill's reconnaissance capabilities. - [EXTERNAL_DOWNLOADS]: The skill uses
curlto probe HTTP services on open ports and to search for API documentation (e.g.,swagger.json). These are standard HTTP requests used for service identification. - [SAFE]: The skill's primary purpose is security reconnaissance, which is a legitimate task for security professionals. The techniques used (port scanning, banner grabbing, and basic authentication checks) are well-known and documented. No evidence of data exfiltration to unauthorized third parties or malicious code obfuscation was found.
Audit Metadata