naabu-portscan

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides detailed instructions for executing several command-line tools including naabu, httpx, nuclei, and subfinder. It also demonstrates shell piping techniques to chain these tools together for automated scanning workflows.
  • [PRIVILEGE_ESCALATION]: The documentation explicitly mentions and provides an example for using sudo to perform SYN scans (sudo naabu -host target.com -s s). This is documented as a functional requirement for the tool to access raw sockets, which is standard behavior for low-level network scanning.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external data such as domain lists, IP addresses, and CIDR ranges provided by users or piped from other tools.
  • Ingestion points: Targets provided via the -host flag, the -l target list file, or standard input (stdin).
  • Boundary markers: None identified in the instruction templates.
  • Capability inventory: Perform high-speed network scanning, execute subprocesses (nmap integration via -nmap-cli), and chain network operations through pipes.
  • Sanitization: No explicit input validation or sanitization steps are documented for the target strings before they are passed to the CLI tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 04:24 AM