naabu-portscan

该技能与其声明目的高度一致，未见凭据窃取、异常数据外传或可疑安装链，恶意意图不明显。但它明确赋予 AI 代理主动端口扫描和渗透侦察能力，并可串联 nuclei/nmap 扩大影响面，因此应归类为高风险安全工具而非普通 benign 技能。

This snippet does not contain executable malware or implementation code; it is a set of evaluation prompts with exact, operational command templates for performing internal port scanning and subsequent HTTP reachability and vulnerability scanning using naabu/httpx/nuclei. The primary concern is misuse enablement for intrusive reconnaissance rather than supply-chain malware embedded in the package.