Agent skill · security · aiskillstore
recon-nmap
Network reconnaissance and security auditing using Nmap for port scanning, service enumeration, and vulnerability detection. Use when: (1) Conducting authorized network reconnaissance and asset discovery, (2) Enumerating network services and identifying running versions, (3) Detecting security vulnerabilities through NSE scripts, (4) Mapping network topology and firewall rules, (5) Performing compliance scanning for security assessments, (6) Validating network segmentation and access controls.
Why this skill is useful
Provides specific Nmap commands and workflows for network reconnaissance that the AI wouldn't reliably generate on its own.
What it needs
Requires masscan, nmap, python3 installed locally. About 9k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Nmap Network Reconnaissance Overview Nmap (Network Mapper) is the industry-standard tool for network discovery, security auditing, and vulnerability assessment. This skill provides structured workflows for authorized reconnaissance operations including port scanning, service enumeration, OS fingerprinting, and vulnerability detection using Nmap Scripting Engine (NSE). IMPORTANT: Network scanning may be disruptive and must only be conducted with proper authorization. Always ensure written permission before scanning networks or systems you do not own. Quick Start Basic host discovery and port scanning: Core Workflow Network Reconnaissance Workflow Progress: [ ] 1. Verify authorization and scope [ ] 2. Perform host discovery and asset enumeration [ ] 3. Conduct port scanning on live hosts [ ] 4. Enumerate services and versions [ ] 5. Perform OS fingerprinting and detection [ ] 6. Run NSE scripts for vulnerability detection [ ] 7. Document findings and generate reports [ ] 8. Validate results and identify false positives Work through each step systematically. Check off completed items. 1. Authorization Verification CRITICAL: Before any scanning activities: Confirm written authorization from network owner Review scope document for in-scope IP ranges and domains Verify scanning windows and rate-limiting requirements Document emergency contact for accidental disruption Confirm blacklisted hosts (production databases, critical infrastructure) 2. Host Discovery Identify live hosts in target network: Host discovery techniques: ICMP Echo (-PE): Standard ping, often blocked TCP SYN (-PS): Half-open connection to specified ports TCP ACK (-PA): Sends ACK packets, useful for stateful firewalls UDP (-PU): Sends UDP packets to specified ports ARP (-PR): Layer 2 discovery, only works on local network Output live hosts to file for subsequent scanning: 3. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/recon-nmap