naabu-portscan
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides detailed instructions for executing several command-line tools including
naabu,httpx,nuclei, andsubfinder. It also demonstrates shell piping techniques to chain these tools together for automated scanning workflows. - [PRIVILEGE_ESCALATION]: The documentation explicitly mentions and provides an example for using
sudoto perform SYN scans (sudo naabu -host target.com -s s). This is documented as a functional requirement for the tool to access raw sockets, which is standard behavior for low-level network scanning. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external data such as domain lists, IP addresses, and CIDR ranges provided by users or piped from other tools.
- Ingestion points: Targets provided via the
-hostflag, the-ltarget list file, or standard input (stdin). - Boundary markers: None identified in the instruction templates.
- Capability inventory: Perform high-speed network scanning, execute subprocesses (
nmapintegration via-nmap-cli), and chain network operations through pipes. - Sanitization: No explicit input validation or sanitization steps are documented for the target strings before they are passed to the CLI tools.
Audit Metadata