📦
content-creator
88ブランドに一貫したマーケティングコンテンツを作成
マーケティングチームには、チャネルを横断して一貫性を保つコンテンツが必要です。このスキルは、ブランドボイスとSEOに合わせてコンテンツを計画、執筆、分析、最適化するのに役立ちます。
ライティング＆コンテンツ 表示
スキル security-scanning-tools
📦
security-scanning-tools
v1.1 コンテンツリビジョン r1 重大 ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス
セキュリティスキャンワークフローの評価
セキュリティチームには、承認済みの脆弱性スキャンと評価レポートのための一貫した方法が必要です。このスキルは、管理されたセキュリティレビューのために、一般的なツール、ワークフロー、出力、レポート作成手順を整理します。
対応: Claude Codex Code(CC)
このスキルはパックに含まれています
タスクに必要なすべてのスキルを、パックごと 1 コマンドでインストールできます。
この Skill を自動インストールしないでください。
基準ポリシーにより、インストール操作の前にオペレーターのレビューが必要です。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "security-scanning-tools" from https://skillstore.io/skills/sickn33-security-scanning-tools.md and its manifest at https://skillstore.io/api/skills/sickn33-security-scanning-tools/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「security-scanning-tools」を使用しています。 小規模オフィスのサブネットに対する、承認済みの内部ネットワーク脆弱性評価を計画する。
期待される結果:
- 承認済み資産と除外システムを含むスコープ概要。
- 探索、サービス識別、脆弱性スキャン、検証、レポート作成の各フェーズ。
- 主要な検出事項、影響を受けるサービス、リスク評価、修復優先度を含むレポート概要。
「security-scanning-tools」を使用しています。 認証が必要な領域を含むWebアプリケーションセキュリティレビューのためのツールを選択する。
期待される結果:
- プロキシベースのテスト、クロール、パッシブレビュー、アクティブチェック、手動検証の推奨利用。
- 認証設定、スコープ境界、レート制限、証跡収集に関する注意点。
- OWASP形式の検出事項と修復ガイダンスのための簡潔なレポート構成。
「security-scanning-tools」を使用しています。 Linuxサーバー向けのコンプライアンススキャン証跡を準備する。
期待される結果:
- 推奨されるコンプライアンススキャナーのカテゴリとプロファイル選択手順。
- スキャンレポート、例外、修復追跡に関する証跡要件。
- 特権アクセスと本番システムへの影響に関する運用上の注意。
セキュリティ監査
重大v4 • 2026/7/7 バージョン別レポートを開く
The Markdown backtick and some reference-table matches are false positives, but the skill contains extensive confirmed active scanning guidance. High-risk content includes Nmap and Masscan workflows, sudo-based tooling, command-line API key exposure, Metasploit exploitation validation, Internet-wide scanning, and wireless deauthentication or password cracking.
1
スキャンされたファイル
590
解析済み行数
58
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (61)
重大
Metasploit framework
#### Metasploit Vulnerability Validation
The skill explicitly introduces Metasploit vulnerability validation and msfconsole usage. This framework can enable exploitation workflows, so marketplace publication requires strict controls.
重大
Metasploit framework
# Start Metasploit
The skill explicitly introduces Metasploit vulnerability validation and msfconsole usage. This framework can enable exploitation workflows, so marketplace publication requires strict controls.
重大
Wireless Deauthentication and Password Cracking Guidance
The Aircrack-ng section gives steps for deauthentication attacks and WPA or WEP cracking. These instructions can disrupt networks and support unauthorized credential attacks.
The section labels deauthentication as an attack and then provides concrete cracking commands, leaving little ambiguity about offensive capability.
重大
Exploit Validation and Auto-Exploitation Workflow
The Metasploit section says to validate vulnerabilities with exploitation and includes commands to select an SMB scanner, run it, and suggest exploits. This goes beyond passive vulnerability assessment.
The text explicitly references exploitation and Metasploit workflow steps, including exploit suggestion through analyze.
高
Certificate/key files
zap.sh -daemon -port 8080 -config api.key=<your_key>
The ZAP API example places an API key value directly on a command line. If replaced with a real key, it may leak through shell history, process listings, or logs.
高
Network scanning tools
#### Nmap (Network Mapper)
The line is a heading, guide entry, or workflow reference that confirms the skill is built around network scanning tools. It supports the same operational scanning capability described throughout SKILL.md.
高
Network scanning tools
nmap -sn 192.168.1.0/24 # Ping scan (no port scan)
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -sL 192.168.1.0/24 # List scan (DNS resolution)
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
確認済みの61件をすべて表示
高
Network scanning tools
nmap -Pn 192.168.1.100 # Skip host discovery
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -sS 192.168.1.100 # TCP SYN scan (stealth)
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -sT 192.168.1.100 # TCP connect scan
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -sU 192.168.1.100 # UDP scan
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -sA 192.168.1.100 # ACK scan (firewall detection)
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -p 80,443 192.168.1.100 # Specific ports
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -p- 192.168.1.100 # All 65535 ports
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -p 1-1000 192.168.1.100 # Port range
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap --top-ports 100 192.168.1.100 # Top 100 common ports
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -sV 192.168.1.100 # Service version detection
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -O 192.168.1.100 # OS detection
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -A 192.168.1.100 # Aggressive (OS, version, scripts)
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -T4 192.168.1.100 # Aggressive (faster)
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -T5 192.168.1.100 # Insane (fastest)
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap --script=vuln 192.168.1.100 # Vulnerability scripts
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap --script=http-enum 192.168.1.100 # Web enumeration
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap --script=smb-vuln* 192.168.1.100 # SMB vulnerabilities
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap --script=default 192.168.1.100 # Default script set
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -oN scan.txt 192.168.1.100 # Normal output
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -oX scan.xml 192.168.1.100 # XML output
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -oG scan.gnmap 192.168.1.100 # Grepable output
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
nmap -oA scan 192.168.1.100 # All formats
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
#### Masscan
The line is a heading, guide entry, or workflow reference that confirms the skill is built around network scanning tools. It supports the same operational scanning capability described throughout SKILL.md.
高
Network scanning tools
masscan -p80 192.168.1.0/24 --rate=1000
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
masscan -p80,443,8080 192.168.1.0/24 --rate=10000
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
masscan -p0-65535 192.168.1.0/24 --rate=5000
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
masscan 0.0.0.0/0 -p443 --rate=100000 --excludefile exclude.txt
The Masscan command targets 0.0.0.0/0 at a high rate, enabling Internet-wide active scanning. This is a concrete high-risk network scanning instruction.
高
Network scanning tools
masscan -p80 192.168.1.0/24 -oG results.gnmap
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
masscan -p80 192.168.1.0/24 -oJ results.json
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
masscan -p80 192.168.1.0/24 -oX results.xml
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
masscan -p80 192.168.1.0/24 --banners
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
# Import Nmap results
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
- Host discovery (Nmap ping sweep)
The line is a heading, guide entry, or workflow reference that confirms the skill is built around network scanning tools. It supports the same operational scanning capability described throughout SKILL.md.
高
Network scanning tools
| Network Discovery | Nmap, Masscan |
The line is a heading, guide entry, or workflow reference that confirms the skill is built around network scanning tools. It supports the same operational scanning capability described throughout SKILL.md.
高
Network scanning tools
# Nmap XML to HTML
The line is a heading, guide entry, or workflow reference that confirms the skill is built around network scanning tools. It supports the same operational scanning capability described throughout SKILL.md.
高
Network scanning tools
xsltproc nmap-output.xml -o report.html
The command converts Nmap scan output into a report rather than scanning directly. It is still part of an Nmap workflow and confirms the skill handles network scanning results.
高
Network scanning tools
### Nmap Cheat Sheet
The line is a heading, guide entry, or workflow reference that confirms the skill is built around network scanning tools. It supports the same operational scanning capability described throughout SKILL.md.
高
Network scanning tools
| Ping Scan | `nmap -sn <target>` |
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
| Quick Scan | `nmap -T4 -F <target>` |
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
| Full Scan | `nmap -p- <target>` |
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
| Service Scan | `nmap -sV <target>` |
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
| OS Detection | `nmap -O <target>` |
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
| Aggressive | `nmap -A <target>` |
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
| Vuln Scripts | `nmap --script=vuln <target>` |
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
| Stealth Scan | `nmap -sS -T2 <target>` |
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
1. Try different discovery methods: `nmap -Pn` or `nmap -sn -PS/PA/PU`
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
3. Use TCP SYN scan: `nmap -PS22,80,443`
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
1. Increase timing: `nmap -T4` or `-T5`
The line provides an Nmap or Masscan command for host discovery, port scanning, service detection, vulnerability scripts, or troubleshooting. These are active network scanning instructions that require authorization.
高
Network scanning tools
3. Use Masscan for initial discovery
The line is a heading, guide entry, or workflow reference that confirms the skill is built around network scanning tools. It supports the same operational scanning capability described throughout SKILL.md.
高
Unbounded Internet-Wide High-Rate Scanning Guidance
The Masscan section includes a large-scale scan against 0.0.0.0/0 with a rate of 100000. This teaches Internet-wide probing unless the user replaces it with a tightly authorized scope.
The line directly targets the entire IPv4 space and sets a high packet rate, so the operational risk is explicit.
中
System reconnaissance
nmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)
The Nmap timing example describes a paranoid scan associated with IDS evasion. That is reconnaissance guidance with stealth implications even though the target is private-address example text.
中
System reconnaissance
sudo airodump-ng -c <channel> --bssid <target_bssid> -w capture wlan0mon
The wireless capture command collects traffic for a specific BSSID. That is reconnaissance against a wireless target and requires explicit authorization.
機能レビュー項目 (58)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
sudo privilege escalation
sudo systemctl start nessusd
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo apt install openvas
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo gvm-setup
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo gvm-start
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo airmon-ng start wlan0
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo airodump-ng wlan0mon
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo airodump-ng -c <channel> --bssid <target_bssid> -w capture wlan0mon
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo aireplay-ng -0 10 -a <bssid> wlan0mon
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo freshclam
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo lynis audit system
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo lynis audit system --quick
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo lynis audit system --profile server
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo lynis audit system --report-file /tmp/lynis-report.dat
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo lynis show profiles
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
sudo privilege escalation
sudo lynis audit system --tests-from-group malware
The line instructs running security tooling with sudo, which can change host state or access privileged interfaces. In an AI-assisted workflow this requires explicit human authorization and containment.
高
Hardcoded IP address
masscan 0.0.0.0/0 -p443 --rate=100000 --excludefile exclude.txt
The command scans 0.0.0.0/0 with Masscan at a very high rate, which is Internet-wide active probing. That can affect third-party systems and violates safe default scope expectations.
高
Hardcoded IP address
set RHOSTS 192.168.1.0/24
The IP range is used as Metasploit RHOSTS for an SMB vulnerability scanner. Even though it is a private subnet example, the surrounding exploitation workflow makes this an operational attack-risk pattern.
中
Hardcoded IP address
nmap -sn 192.168.1.0/24 # Ping scan (no port scan)
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -sL 192.168.1.0/24 # List scan (DNS resolution)
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -Pn 192.168.1.100 # Skip host discovery
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -sS 192.168.1.100 # TCP SYN scan (stealth)
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -sT 192.168.1.100 # TCP connect scan
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -sU 192.168.1.100 # UDP scan
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -sA 192.168.1.100 # ACK scan (firewall detection)
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -p 80,443 192.168.1.100 # Specific ports
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -p- 192.168.1.100 # All 65535 ports
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -p 1-1000 192.168.1.100 # Port range
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap --top-ports 100 192.168.1.100 # Top 100 common ports
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -sV 192.168.1.100 # Service version detection
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -O 192.168.1.100 # OS detection
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -A 192.168.1.100 # Aggressive (OS, version, scripts)
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -T0 192.168.1.100 # Paranoid (slowest, IDS evasion)
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -T4 192.168.1.100 # Aggressive (faster)
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -T5 192.168.1.100 # Insane (fastest)
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap --script=vuln 192.168.1.100 # Vulnerability scripts
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap --script=http-enum 192.168.1.100 # Web enumeration
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap --script=smb-vuln* 192.168.1.100 # SMB vulnerabilities
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap --script=default 192.168.1.100 # Default script set
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -oN scan.txt 192.168.1.100 # Normal output
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -oX scan.xml 192.168.1.100 # XML output
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -oG scan.gnmap 192.168.1.100 # Grepable output
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nmap -oA scan 192.168.1.100 # All formats
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
masscan -p80 192.168.1.0/24 --rate=1000
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
masscan -p80,443,8080 192.168.1.0/24 --rate=10000
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
masscan -p0-65535 192.168.1.0/24 --rate=5000
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
masscan -p80 192.168.1.0/24 -oG results.gnmap
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
masscan -p80 192.168.1.0/24 -oJ results.json
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
masscan -p80 192.168.1.0/24 -oX results.xml
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
masscan -p80 192.168.1.0/24 --banners
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
nessuscli scan --create --name "Internal Scan" --targets 192.168.1.0/24
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Hardcoded IP address
<hosts>192.168.1.0/24</hosts>
The address appears in active network or vulnerability scanner examples against a subnet or host. These examples are legitimate only inside authorized scope and can probe systems if executed.
中
Temp directory access
sudo lynis audit system --report-file /tmp/lynis-report.dat
The command writes a privileged Lynis audit report to /tmp, which may expose security posture details on shared systems. The risk depends on permissions, so confidence is moderate.
低
Hardcoded URL
zap-cli quick-scan https://target.com
The example invokes active web scanners against https://target.com, which would send traffic to an external host if copied literally. It is likely a placeholder, but the skill does not enforce authorization or a reserved example domain.
低
Hardcoded URL
zap-cli spider https://target.com
The example invokes active web scanners against https://target.com, which would send traffic to an external host if copied literally. It is likely a placeholder, but the skill does not enforce authorization or a reserved example domain.
低
Hardcoded URL
zap-cli active-scan https://target.com
The example invokes active web scanners against https://target.com, which would send traffic to an external host if copied literally. It is likely a placeholder, but the skill does not enforce authorization or a reserved example domain.
低
Hardcoded URL
-t https://target.com -r report.html
The example invokes active web scanners against https://target.com, which would send traffic to an external host if copied literally. It is likely a placeholder, but the skill does not enforce authorization or a reserved example domain.
低
Hardcoded URL
-t https://target.com -r report.html
The example invokes active web scanners against https://target.com, which would send traffic to an external host if copied literally. It is likely a placeholder, but the skill does not enforce authorization or a reserved example domain.
低
Hardcoded URL
nikto -h https://target.com
The example invokes active web scanners against https://target.com, which would send traffic to an external host if copied literally. It is likely a placeholder, but the skill does not enforce authorization or a reserved example domain.
リスク要因
⚙️ 外部コマンド (61)
SKILL.md:42-81 SKILL.md:81-87 SKILL.md:87-105 SKILL.md:105-113 SKILL.md:113-125 SKILL.md:125-138 SKILL.md:138-159 SKILL.md:159-167 SKILL.md:167-181 SKILL.md:181-195 SKILL.md:195-211 SKILL.md:211-214 SKILL.md:214-222 SKILL.md:222-228 SKILL.md:228-249 SKILL.md:249-257 SKILL.md:257-278 SKILL.md:278-284 SKILL.md:284-297 SKILL.md:297-305 SKILL.md:305-326 SKILL.md:326-332 SKILL.md:332-351 SKILL.md:351-359 SKILL.md:359-380 SKILL.md:380-386 SKILL.md:386-401 SKILL.md:401-409 SKILL.md:409-425 SKILL.md:425-431 SKILL.md:431-445 SKILL.md:445-495 SKILL.md:495-512 SKILL.md:512-520 SKILL.md:520-521 SKILL.md:521-522 SKILL.md:522-523 SKILL.md:523-524 SKILL.md:524-525 SKILL.md:525-526 SKILL.md:526-527 SKILL.md:527-569 SKILL.md:569 SKILL.md:571-577 SKILL.md:577 SKILL.md:578-580 SKILL.md:115 SKILL.md:140 SKILL.md:141 SKILL.md:144 SKILL.md:262 SKILL.md:265 SKILL.md:268 SKILL.md:271 SKILL.md:307 SKILL.md:411 SKILL.md:414 SKILL.md:417 SKILL.md:420 SKILL.md:423 SKILL.md:424
🌐 ネットワークアクセス (48)
SKILL.md:503 SKILL.md:118 SKILL.md:147 SKILL.md:200 SKILL.md:203 SKILL.md:204 SKILL.md:217 SKILL.md:221 SKILL.md:230 SKILL.md:292 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:55 SKILL.md:56 SKILL.md:57 SKILL.md:58 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:77 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:89 SKILL.md:90 SKILL.md:93 SKILL.md:96 SKILL.md:99 SKILL.md:100 SKILL.md:101 SKILL.md:104 SKILL.md:121 SKILL.md:157 SKILL.md:169 SKILL.md:345 SKILL.md:536
📁 ファイルシステムへのアクセス (3)
検出されたパターン
Metasploit framework×2System reconnaissance×2Network scanning tools×53
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/sickn33-security-scanning-tools/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/sickn33-security-scanning-tools?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/sickn33-security-scanning-tools?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-security-scanning-tools/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/sickn33-security-scanning-tools.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
sickn33. (2026). security-scanning-tools security audit report (audit version 4) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-security-scanning-tools/audits/4BibTeX形式の引用
@techreport{sickn33-sickn33-security-scanning-tools-2026,
author = {sickn33},
title = {security-scanning-tools security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-security-scanning-tools/audits/4},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "security-scanning-tools security audit report (audit version 4)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-security-scanning-tools/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-security-scanning-tools:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
69
コミュニティ
78
仕様準拠
作成できるもの
内部スキャンを計画する
承認済みの内部ネットワークレビューのために、スコープを定義し、探索ツールを選択し、想定される出力を整理します。
Web評価を準備する
承認済みのアプリケーションセキュリティテストのために、Webスキャナー、プロキシワークフロー、レポート作成手順を選択します。
コンプライアンス証跡を文書化する
監査準備に必要な証跡に、コンプライアンススキャナーとレポート形式を対応付けます。
これらのプロンプトを試す
スキャンツールを選択する
この環境を評価するための書面による承認があります。スコープ: [scope]、資産タイプ: [assets]、必要なレポート形式: [format] に対して、スキャンツールの選定を支援してください。
スキャン計画を作成する
承認済みのセキュリティレビューのために、段階的なスキャン計画を作成してください。探索、脆弱性チェック、検証手順、レポート出力、安全上の制限を含めてください。
ツールのカバレッジを比較する
この承認済み評価: [goals] について、Nmap、Nessus、OpenVAS、ZAP、Nikto、Lynis、OpenSCAP を比較してください。重複、ギャップ、レポート上の価値を説明してください。
管理された評価を設計する
承認済みのネットワーク、Web、クラウド、コンプライアンステストのために、管理されたスキャン手法を設計してください。スコープ管理、リスク制限、検証、経営層向けレポートを含めてください。
ベストプラクティス
- スキャンを実施する前に、書面による承認と明確なスコープを用意してください。
- 侵入的なテストの前に、パッシブまたは低影響のチェックから開始してください。
- 自動化された検出結果は、報告または修復の前に手動で検証してください。
回避
- 許可なく公開システムまたは第三者システムをスキャンしないでください。
- 変更承認なしに、本番ネットワークに対して高レートのスキャンを実行しないでください。
- エクスプロイトによる検証を、通常の脆弱性確認として扱わないでください。
よくある質問
このスキルは単独でスキャンを実行しますか？
いいえ。これはガイダンスとコマンド例を提供します。ツール、権限、ターゲットの承認についてはユーザーが責任を負います。
このスキルは公開ターゲットに対して安全ですか？
いいえ。ユーザーが明示的な書面による承認を得ているシステムに対してのみ使用すべきです。
どのツールを扱っていますか？
Nmap、Masscan、Nessus、OpenVAS、Burp Suite、ZAP、Nikto、Aircrack-ng、ClamAV、Prowler、ScoutSuite、Lynis、OpenSCAP などのツールを扱います。
レポート作成に役立ちますか？
はい。レポートタイプ、出力形式、基本的なエグゼクティブサマリーの構成を説明します。
脆弱性を確認してくれますか？
いいえ。検証の概念は説明しますが、脆弱性が確認済みであると宣言する前に専門家によるレビューが必要です。
一部の例が制限されているのはなぜですか？
一部の例には、許可なく実行するとシステムに害を及ぼす可能性のある、侵入的スキャン、特権コマンド、無線の中断、エクスプロイトのワークフローが含まれます。
開発者情報
作成者
sickn33ライセンス
MIT
作者バージョン
v1.1
Skillstore リビジョン
r1
バージョンに関する注意
作者が宣言したバージョンは有効な SemVer ではありません。
リポジトリ
https://github.com/sickn33/antigravity-awesome-skills/tree/main/web-app/public/skills/scanning-tools参照
9f814fc6a43fd99946f2da5e0df231c65a38bc76
メンテナンスの新しさ
2026/7/18
利用状況
8 ダウンロード · 131 閲覧
ファイル構成
📄 SKILL.md
sickn33 のその他のスキル
すべて表示📦
prompt-engineering-patterns
85実証済みパターンでLLMプロンプトを改善
一貫性のないプロンプトは時間を浪費し、AIの出力を信頼しにくくします。このスキルは、再利用可能なパターン、例、評価手順、最適化ワークフローを使ってプロンプト設計を支援します。
生産性 表示
📦
senior-architect
81スケーラブルなソフトウェアアーキテクチャを設計する
アーキテクチャ上の意思決定は、Web、モバイル、バックエンド、クラウドシステム全体で比較するのが困難です。このスキルは、レポート、依存関係レビュー、トレードオフ文書化のための構造化されたガイドとローカルのスキャフォールドスクリプトを提供します。
コーディング＆開発 表示
📦
senior-fullstack
81シニアレベルのパターンでフルスタックアプリを構築
チームには、モダンなWebアプリケーション向けに一貫したセットアップ、アーキテクチャ、レビュー指針が必要です。このスキルは、React、Next.js、Node.js、GraphQL、PostgreSQLプロジェクト向けのスキャフォールダー、ワークフローのリファレンス、品質向上のためのプロンプトを提供します。
コーディング＆開発 表示
📦
prompt-engineer
81Prompt EngineerでAIプロンプトを最適化
目標が曖昧だったり複雑だったりすると、明確なプロンプトを書くのは困難です。このスキルは、実績のあるプロンプトフレームワークを使って、粗い依頼を構造化されたプロンプトに変換します。
生産性 表示
📦
product-manager-toolkit
80リサーチインサイトでプロダクト業務の優先順位を決める
プロダクトチームには、機能の順位付け、インタビューの統合、意思決定の文書化をより速く行う方法が必要です。このスキルは、構造化された計画のために、RICEスコアリング、インタビュー分析、PRDテンプレートを提供します。
生産性 表示
関連スキル
すべて表示📦
python-web-app-security-audit
90Audit Python Web Apps Before Release
作成者 glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
セキュリティ＆コンプライアンス 表示
📦
isms-audit-expert
83ISO 27001 ISMS 統制の監査
作成者 alirezarezvani
ISMS 監査には、明確な範囲、証拠、リスクベースの優先順位が必要です。このスキルは、ISO 27001 監査計画、統制テスト、準備作業を支援します。
セキュリティ＆コンプライアンス 表示
📦
senior-security
81アプリケーションセキュリティレビューを強化する
作成者 alirezarezvani
セキュリティレビューでは、一貫したチェックリストや再利用可能なワークフローが不足しがちです。このスキルは、Claude、Codex、Claude Code 向けに、セキュリティレビューのひな形、参照ガイダンス、シンプルなレポート作成スクリプトを提供します。
セキュリティ＆コンプライアンス 表示
📦
senior-secops
81SecOpsチェックを自動化
作成者 alirezarezvani
セキュリティチームには、プロジェクト全体で一貫したレビューワークフローが必要です。このスキルは、反復可能なチェックのためのSecOps CLIの雛形とリファレンスガイドを提供します。
セキュリティ＆コンプライアンス 表示
📦
security-engineering
81セキュリティエンジニアリングの意思決定を強化する
作成者 89jobrien
セキュリティ業務は多くの場合、アーキテクチャ、アイデンティティ、コンプライアンス、テスト、対応計画にまたがります。このスキルは、Claude、Codex、Claude Codeに、構造化されたセキュリティエンジニアリングのガイダンスを提供します。
セキュリティ＆コンプライアンス 表示
📦
security-analyzer
80プロジェクトのセキュリティリスクを分析
作成者 Cornjebus
依存関係、コンテナ、IaC のデータがリポジトリ全体に分散していると、セキュリティレビューには時間がかかります。このスキルはアセットを棚卸しし、OSV.dev をチェックして、優先順位付きの修復レポートのドラフトを作成します。
セキュリティ＆コンプライアンス 表示