📦
pytm
81pytm Threat Models as Code を構築する
脅威モデリングは、アーキテクチャ変更から切り離され、古くなりがちです。このスキルは、セキュリティレビューと CI のために、pytm モデル、STRIDE 分析、図表ワークフローの作成を支援します。
セキュリティ＆コンプライアンス 表示
スキル recon-nmap
📦
recon-nmap
v0.1.0 コンテンツリビジョン r2 重大 ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス🔑 環境変数⚡ スクリプトを含む
認可済みのNmapワークフローでネットワークを把握
ネットワークチームには、スコープ、タイミング、レポートを明確に保つ再現可能な偵察手順が必要です。このスキルは、認可済みの資産発見、サービス列挙、脆弱性検証のための構造化されたNmapワークフローを提供します。
対応: Claude Codex Code(CC)
この Skill を自動インストールしないでください。
基準ポリシーにより、インストール操作の前にオペレーターのレビューが必要です。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "recon-nmap" from https://skillstore.io/skills/agentsecops-recon-nmap.md and its manifest at https://skillstore.io/api/skills/agentsecops-recon-nmap/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「recon-nmap」を使用しています。 承認済みの内部サブネットに対する発見とポートスキャンを計画してください。
期待される結果:
認可確認、稼働ホスト発見、一般的なポートのスキャン、サービス検出、レート制限、名前付き結果ファイルを含む段階的なスキャン計画。
「recon-nmap」を使用しています。 Nmapの検出事項をセキュリティチームに報告する方法を要約してください。
期待される結果:
スコープ、スキャンタイミング、発見されたホスト、公開サービス、疑われる脆弱性、誤検知確認、修復担当者を扱う簡潔なレポート概要。
「recon-nmap」を使用しています。 脆弱な本番環境向けにNmapスキャンを調整してください。
期待される結果:
承認済みの時間帯、抑制されたタイミング、パケットレート制限、より小さな対象バッチ、監視連絡先、ロールバック手順を使用する慎重なワークフロー。
セキュリティ監査
重大v9 • 2026/7/23 バージョン別レポートを開く
Most static hits in templates and Markdown are false positives caused by code fences, placeholders, defensive examples, and documentation links. Confirmed findings include privileged Nmap execution, active-scanning commands, offensive NSE guidance, scan-evasion techniques, mutable CI dependencies, and a remote installer piped to Bash. The skill requires substantial restriction and remediation before public marketplace distribution.
6
スキャンされたファイル
2,165
解析済み行数
15
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (121)
重大
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads a mutable remote installer and pipes it directly to Bash, enabling supply-chain code execution.
高
Network scanning tools
name: recon-nmap
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
高
Network scanning tools
Network reconnaissance and security auditing using Nmap for port scanning, service enumeration,
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
高
Network scanning tools
tags: [reconnaissance, nmap, port-scanning, service-enumeration, network-security, osint]
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
高
Network scanning tools
packages: [nmap]
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
高
Network scanning tools
tools: [python3, masscan]
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
高
Network scanning tools
# Nmap Network Reconnaissance
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
高
Network scanning tools
Nmap (Network Mapper) is the industry-standard tool for network discovery, security auditing, and vu
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
確認済みの121件をすべて表示
高
Network scanning tools
nmap -F <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sV <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -A <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sn <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sn -PR <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sn -PS22,80,443 <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sn -PU53,161 <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -Pn <target-network>/24
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sn <target-network>/24 -oG - | awk '/Up$/{print $2}' > live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -F -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p- -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 22,80,443,3389,8080 -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 1-1024,3000-9000 -iL live_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
sudo nmap -sS <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sT <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
sudo nmap -sU -p 53,161,500 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sV <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
sudo nmap -A <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T0 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T1 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T2 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T3 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T4 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T5 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap --max-rate 100 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap --min-rate 10 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap --scan-delay 1s <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sV <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sV --version-intensity 5 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sV --version-intensity 0 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sV -p 80,443 --script=http-headers,http-title <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 445 --script=smb-os-discovery,smb-security-mode <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 22 --script=ssh-hostkey,ssh-auth-methods <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 53 --script=dns-nsid,dns-recursion <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 80,443 --script=http-methods,http-robots.txt,http-title <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 3306 --script=mysql-info <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 5432 --script=pgsql-brute <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 1433 --script=ms-sql-info <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
sudo nmap -O <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
sudo nmap -A <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
sudo nmap -O --osscan-limit <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
sudo nmap -O --osscan-guess <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
Nmap Scripting Engine for advanced reconnaissance and vulnerability detection:
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
高
Network scanning tools
nmap -sC <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap --script=vuln <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap --script=exploit <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap --script=discovery <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap --script=http-sql-injection <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap --script=smb-vuln-ms17-010,smb-vuln-cve-2017-7494 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap --script=http-brute --script-args http-brute.path=/admin <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 445 --script=smb-vuln-ms17-010 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 443 --script=ssl-heartbleed <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap --script=http-shellshock --script-args uri=/cgi-bin/test.sh <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 443 --script=ssl-enum-ciphers <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 80 --script=http-sql-injection <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 21 --script=ftp-anon <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap <target-ip> -oN scan_results.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap <target-ip> -oX scan_results.xml
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap <target-ip> -oG scan_results.gnmap
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap <target-ip> -oA scan_results
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap <target-ip> -oS scan_results.skid
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
sudo nmap -f <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
sudo nmap -D RND:10 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
sudo nmap -D decoy1,decoy2,ME,decoy3 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
sudo nmap -S <spoofed-ip> -e <interface> <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap --randomize-hosts -iL targets.txt
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap --proxies http://proxy:8080 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
sudo nmap -sI <zombie-host> <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -sn -PE -PS80,443 -PA3389 <external-network>/24 -oG - | awk '/Up$/{print $2}' > external_hosts.
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -Pn -sV -p 21,22,25,53,80,110,143,443,587,993,995,3389,8080,8443 -iL external_hosts.txt -oA ext
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -Pn -sV --script=vuln -p 21,22,25,80,443,3389,8080,8443 -iL external_hosts.txt -oA external_vul
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -Pn -p 443,8443 --script=ssl-enum-ciphers,ssl-cert -iL external_hosts.txt -oA ssl_audit
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sn -PR <internal-network>/24 -oG - | awk '/Up$/{print $2}' > internal_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sV -p- -T4 -iL internal_hosts.txt -oA internal_full_scan
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
sudo nmap -O -iL internal_hosts.txt -oA internal_os_detection
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sV --script=default,discovery -iL internal_hosts.txt -oA internal_services
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 80,443,8000,8080,8443 --open -oG - <target-network>/24 | grep 'open' | awk '{print $2}' > we
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -sV -p 80,443,8080,8443 --script=http-enum,http-headers,http-methods,http-title,http-server-hea
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 80,443 --script=http-sql-injection,http-csrf,http-vuln-cve2017-5638 -iL web_servers.txt -oA
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 445 --open <target-network>/24 -oG - | grep 'open' | awk '{print $2}' > smb_hosts.txt
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 445 --script=smb-protocols,smb-security-mode,smb-os-discovery -iL smb_hosts.txt -oA smb_enum
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 445 --script=smb-vuln* -iL smb_hosts.txt -oA smb_vulns
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 445 --script=smb-enum-shares,smb-enum-users -iL smb_hosts.txt -oA smb_shares
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -sV -p 1433,1521,3306,5432,5984,6379,9200,27017 <target-network>/24 -oA database_scan
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 3306 --script=mysql-info,mysql-databases,mysql-variables <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 5432 --script=pgsql-brute <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 27017 --script=mongodb-info,mongodb-databases <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -p 6379 --script=redis-info <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -Pn -sV --script=vuln -p 21,22,25,80,443,3389,8080 \
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -Pn <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -PS80,443 -PA3389 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -PE -PS22,80,443 -PA3389 -PU53,161 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T4 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -F <target-ip> # Top 100 ports
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap --top-ports 1000 <target-ip>
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T4 192.168.1.1-50 &
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T4 192.168.1.51-100 &
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
nmap -T4 192.168.1.101-150 &
This is an executable Nmap command that sends discovery, port, service, operating-system, or vulnerability probes to a supplied target.
高
Network scanning tools
# Use masscan for very fast port scanning
The skill metadata or guidance explicitly declares operational Nmap or Masscan reconnaissance capability.
高
Network scanning tools
masscan -p 1-65535 --rate 10000 <target-network>/24
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -T1 --scan-delay 1s <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
sudo nmap -f <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap --randomize-hosts -iL targets.txt
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -g 53 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 1-1000 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Network scanning tools
nmap -p 1001-2000 <target-ip>
This operational command performs intrusive, evasive, brute-force, vulnerability, or high-rate network probing against a supplied target.
高
Mutable CI actions can execute with repository credentials
GitHub Actions use mutable tags, including a secrets scanner that receives GITHUB_TOKEN, allowing upstream tag changes to alter privileged CI code.
The workflow visibly uses version tags and master instead of immutable commit SHAs, while one action receives GITHUB_TOKEN.
高
Operational scan-evasion guidance
The guide provides fragmentation, decoy, source spoofing, proxy, idle-scan, and source-port techniques intended to bypass monitoring controls.
The sections explicitly describe firewall or IDS evasion and provide executable Nmap commands for each technique.
高
Brute-force and exploit NSE execution
The guide provides executable NSE commands for exploit categories, SQL injection checks, SMB vulnerabilities, and HTTP or PostgreSQL brute-force testing.
The cited commands directly invoke exploit, vulnerability, injection, enumeration, and brute-force NSE scripts against supplied targets.
低
System reconnaissance
# Paranoid (0) - Extremely slow, IDS evasion
The text explicitly recommends timing behavior intended to evade detection during active reconnaissance.
低
System reconnaissance
# Scan with delays to avoid detection
The text explicitly recommends timing behavior intended to evade detection during active reconnaissance.
低
System reconnaissance
nmap <target-ip> -oS scan_results.skid
The example runs Nmap against a target and therefore performs active reconnaissance despite only demonstrating an output format.
機能レビュー項目 (15)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
sudo privilege escalation
sudo nmap -sS <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -sU -p 53,161,500 <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -A <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -O <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -A <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -O --osscan-limit <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -O --osscan-guess <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -f <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -D RND:10 <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -D decoy1,decoy2,ME,decoy3 <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -S <spoofed-ip> -e <interface> <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -sI <zombie-host> <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -O -iL internal_hosts.txt -oA internal_os_detection
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
高
sudo privilege escalation
sudo nmap -f <target-ip>
This is an operational sudo command that grants Nmap raw-packet privileges and can send disruptive probes to a target.
低
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
This URL supplies executable installer content directly to a shell, so remote changes would execute inside CI.
リスク要因
⚙️ 外部コマンド (50)
assets/ci-config-template.yml:298 assets/ci-config-template.yml:301 assets/ci-config-template.yml:304 assets/ci-config-template.yml:307 assets/ci-config-template.yml:310 assets/ci-config-template.yml:134 assets/ci-config-template.yml:250 assets/ci-config-template.yml:291 SKILL.md:36-45 SKILL.md:45-76 SKILL.md:76-91 SKILL.md:91-102 SKILL.md:102-104 SKILL.md:104-110 SKILL.md:110-125 SKILL.md:125-130 SKILL.md:130-132 SKILL.md:132-135 SKILL.md:135-137 SKILL.md:137-140 SKILL.md:140-142 SKILL.md:142-145 SKILL.md:145-147 SKILL.md:147-150 SKILL.md:150-152 SKILL.md:152-156 SKILL.md:156-174 SKILL.md:174-178 SKILL.md:178-187 SKILL.md:187-193 SKILL.md:193-205 SKILL.md:205-209 SKILL.md:209-226 SKILL.md:226-232 SKILL.md:232-244 SKILL.md:244-256 SKILL.md:256-273 SKILL.md:273-293 SKILL.md:293-311 SKILL.md:311-317 SKILL.md:317-332 SKILL.md:332-336 SKILL.md:336-345 SKILL.md:345-351 SKILL.md:351-370 SKILL.md:370-384 SKILL.md:384-413 SKILL.md:413-425 SKILL.md:425-429 SKILL.md:429-441
🌐 ネットワークアクセス (27)
assets/ci-config-template.yml:240 assets/rule-template.yaml:43 assets/rule-template.yaml:44 assets/rule-template.yaml:45 assets/rule-template.yaml:73 assets/rule-template.yaml:118 assets/rule-template.yaml:119 assets/rule-template.yaml:151 assets/rule-template.yaml:191 assets/rule-template.yaml:192 assets/rule-template.yaml:193 assets/rule-template.yaml:217 assets/rule-template.yaml:260 assets/rule-template.yaml:261 assets/rule-template.yaml:288 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:366 SKILL.md:631 SKILL.md:632 SKILL.md:633 SKILL.md:634 SKILL.md:635 SKILL.md:572 SKILL.md:573 SKILL.md:574
📁 ファイルシステムへのアクセス (3)
🔑 環境変数 (23)
assets/ci-config-template.yml:164 assets/rule-template.yaml:148 assets/rule-template.yaml:148 assets/rule-template.yaml:147 assets/rule-template.yaml:162 assets/rule-template.yaml:132 assets/rule-template.yaml:147 assets/rule-template.yaml:148 assets/rule-template.yaml:156 assets/rule-template.yaml:157 assets/rule-template.yaml:162 assets/rule-template.yaml:163 assets/rule-template.yaml:164 assets/rule-template.yaml:165 references/EXAMPLE.md:423 references/EXAMPLE.md:423 references/EXAMPLE.md:424 references/EXAMPLE.md:425 references/EXAMPLE.md:427 references/EXAMPLE.md:430 references/EXAMPLE.md:432 references/EXAMPLE.md:437 references/EXAMPLE.md:444
⚡ スクリプトを含む (2)
検出されたパターン
Pipe to shell patternSystem reconnaissance×3Network scanning tools×114
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/agentsecops-recon-nmap/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/agentsecops-recon-nmap?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/agentsecops-recon-nmap?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentsecops-recon-nmap/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/agentsecops-recon-nmap.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
AgentSecOps. (2026). recon-nmap security audit report (audit version 9) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/agentsecops-recon-nmap/audits/9BibTeX形式の引用
@techreport{agentsecops-agentsecops-recon-nmap-2026,
author = {AgentSecOps},
title = {recon-nmap security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/agentsecops-recon-nmap/audits/9},
note = {Author version 0.1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "recon-nmap security audit report (audit version 9)"
version: "0.1.0"
type: report
authors:
- name: "AgentSecOps"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/agentsecops-recon-nmap/audits/9"
identifiers:
- type: other
value: "skillstore:agentsecops-recon-nmap:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
100
保守性
87
コンテンツ
73
コミュニティ
87
仕様準拠
作成できるもの
内部ネットワークセグメントを検証する
稼働中のホスト、開いているポート、サービスバージョン、セグメンテーションの不備を発見する、スコープ設定済みのNmapスキャンを計画します。
外部境界レビューを準備する
承認済みの外部範囲に対して、文書化されたレート制限と出力を含む段階的な偵察ワークフローを構築します。
コンプライアンススキャンの証跡を確認する
監査証跡のために、スキャン目標をコマンド、ログ要件、レポート成果物に変換します。
これらのプロンプトを試す
基本的な認可済みスキャンを計画する
認可済みの/24ネットワーク向けに安全なNmap計画を作成してください。スコープ確認、ホスト発見、ポートスキャン、出力ファイルを含めてください。
稼働中ホストのサービスを列挙する
承認済みの稼働中ホスト一覧を前提に、バージョン検出、有用なスクリプト、レポート出力を含むNmapサービス列挙ワークフローを設計してください。
低影響の評価を調整する
機微な本番ネットワーク向けにNmap評価を調整してください。タイミング、レート制限、メンテナンス時間帯、検証手順を含めてください。
完全な偵察ランブックを構築する
内部および外部資産向けの完全な認可済みNmap偵察ランブックを作成してください。証跡の取り扱い、誤検知レビュー、経営層向けレポートを含めてください。
ベストプラクティス
- スキャン活動の前に、書面による認可、正確なスコープ、メンテナンス時間帯を確認します。
- 侵入的なスクリプトや全ポートの一括スキャンを使用する前に、低影響の発見とレート制限付きスキャンから開始します。
- 各レポートには、スキャンログ、コマンド履歴、送信元IPの詳細、タイムスタンプ、検証メモを保存します。
回避
- 承認済みスコープ外のネットワーク、ホスト、ポートをスキャンすること。
- 通常の発見作業中に、exploit、brute-force、evasive、denial-of-serviceスクリプトを実行すること。
- 手動検証と所有者レビューなしに、NSE脆弱性出力を最終的な証明として扱うこと。
よくある質問
このスキルはNmapを自動的に実行しますか？
いいえ。ユーザーが認可済み環境で適用できる計画ガイダンスとコマンドパターンを提供します。
これらのワークフローを使用する前に認可は必要ですか？
はい。ネットワークスキャンは、ユーザーが明示的な書面許可を持つシステムに限定する必要があります。
例によってサービスが中断される可能性はありますか？
はい。全ポートスキャン、UDPスキャン、脆弱性スクリプト、積極的なタイミングは、脆弱なサービスに影響を与える可能性があります。
このスキルにはレポート作成ガイダンスが含まれますか？
はい。Nmap出力形式、XML変換、grepable出力、監査ログ、レポート成果物を扱います。
Claude、Codex、Claude Codeはこのスキルを使用できますか？
はい。メタデータではClaude、Codex、Claude Codeのサポートが宣言されています。
侵入的なNSEスクリプトをデフォルトで使用すべきですか？
いいえ。まず安全なスクリプトを使用し、侵入的なチェックは明示的に承認されたテスト時間帯に限定してください。
開発者情報
作成者
AgentSecOpsライセンス
MIT
作者バージョン
v0.1.0
Skillstore リビジョン
r2
参照
9e952417e76879bc9d853e1b8b2cd6d6d8d4a1c2
メンテナンスの新しさ
2026/7/25
利用状況
8 ダウンロード · 411 閲覧
ファイル構成
AgentSecOps のその他のスキル
すべて表示📦
container-hadolint
72HadolintでDockerfileを検証する
Dockerfileには、安全でないパッケージ、rootユーザー、脆弱なエントリポイント、シークレット処理のミスが隠れていることがあります。このスキルは、イメージがビルドされる前にHadolintスキャン、CIゲート、修正手順をガイドします。
セキュリティ＆コンプライアンス 表示
📦
dast-nuclei
38Nuclei DAST スキャンを実行
手動の脆弱性チェックでは、Web アプリや API 全体にわたる既知の CVE や設定上の問題を見逃すことがあります。このスキルは、Nuclei スキャンの計画、CI ワークフローの調整、検出結果のレビューを支援します。
セキュリティ＆コンプライアンス 表示
📦
sast-semgrep
38Semgrep SASTでコードをスキャン
開発チームには、ルールをゼロから作成せずに繰り返し実行できる静的セキュリティレビューが必要です。このスキルは、Semgrepスキャン、OWASPとCWEのマッピング、修復計画、CI統合をガイドします。
セキュリティ＆コンプライアンス 表示
📦
sca-trivy
38Trivy でコンテナと依存関係をスキャン
未知の CVE や設定ミスは、安全なリリースを遅らせる可能性があります。このスキルは、一般的なデリバリーワークフロー全体で Trivy スキャン、SBOM 作成、修復の優先順位付けをガイドします。
セキュリティ＆コンプライアンス 表示
📦
dast-zap
38OWASP ZAPでWebアプリをスキャン
ランタイムのWebセキュリティテストをチーム全体で標準化するのは困難です。このスキルは、承認済みスキャン、APIテスト、認証、CI/CDレポート作成のためのOWASP ZAPワークフローを提供します。
セキュリティ＆コンプライアンス 表示
関連スキル
すべて表示📦
nmap
38認可済みの Nmap 偵察を実行
作成者 BrownFineSecurity
手動のネットワークスキャンではポートを見落としたり、証跡が整理されないことがあります。このスキルは、認可済みの Nmap スキャン、出力の整理、サービス概要の作成を支援します。
セキュリティ＆コンプライアンス 表示
📦
network-101
38ネットワークサービスラボの構成
作成者 sickn33
ネットワークラボのセットアップでは、多くの場合、再現可能なサービス構成と検証が必要です。このスキルは、制御されたセキュリティ演習のために HTTP、HTTPS、SNMP、SMB のラボサービスを案内します。
セキュリティ＆コンプライアンス 表示
📦
universal-audit
92Audit Software Releases with Evidence
作成者 glenskii
Release decisions often rely on incomplete evidence and inconsistent standards. This skill applies structured controls, deterministic scoring, and mandatory gates to assess readiness.
セキュリティ＆コンプライアンス 表示
📦
python-web-app-security-audit
90Audit Python Web Apps Before Release
作成者 glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
セキュリティ＆コンプライアンス 表示
📦
information-security-manager-iso27001
84ISO 27001セキュリティガバナンスの実装
作成者 davila7
HealthcareおよびMedTechチームには、リスク、管理策、インシデント、監査を結び付ける体系的なISO 27001セキュリティプログラムが必要です。このスキルは、ISO 27001およびISO 27002を使用して、ISMS計画、リスクアセスメント、管理策の選定、認証準備を支援します。
セキュリティ＆コンプライアンス 表示
📦
risk-management-specialist
84医療機器リスクファイルの管理
作成者 alirezarezvani
医療機器チームには、設計、規制対応、市販後業務にわたって一貫したリスクマネジメントのエビデンスが必要です。このスキルは、ISO 14971 に基づく計画、分析、管理策、ファイル保守を支援します。
セキュリティ＆コンプライアンス 表示