Versioned security assessment

Report ID: SA-0CD99A62

6/28/2026, 5:58:23 AM

recon-nmap security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
recon-nmap
Version
v6
Maintainer
AgentSecOps
Source
github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/offsec/recon-nmap
Coverage
5 Files scanned · 2,155 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static findings are partly confirmed. Many command, script, secret, and weak-crypto hits are examples or templates, but SKILL.md provides operational Nmap workflows for intrusive scans, brute-force NSE scripts, exploit checks, and firewall or IDS evasion. No prompt injection attempt or covert exfiltration was found, but the skill remains high risk because it can materially support unauthorized reconnaissance if misused.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

5 Files scanned · 2,155 Lines analyzed

6 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Observed in 2 evidence locations

Network access

May connect to external services.

Observed in 27 evidence locations

Filesystem access

May read or write local files.

Observed in 2 evidence locations

Env variables

May read values from the process environment.

Observed in 18 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 112 evidence locations

Capability review items (6)
High
SKILL.md:76-90SKILL.md:117-124SKILL.md:252-273SKILL.md:456-489
Dual-use Nmap reconnaissance workflows
The skill gives executable Nmap commands for host discovery, full port scanning, service enumeration, OS detection, vulnerability detection, and database or SMB enumeration. The text includes authorization warnings, but these workflows can be directly used against networks outside an approved scope.
The commands are direct operational examples for scanning live networks and enumerating services. Authorization language reduces malicious intent, but it does not remove the dual-use risk.
High
SKILL.md:347-370SKILL.md:590-609
Intrusive and evasive scanning guidance
The skill documents IDS evasion, packet fragmentation, decoys, source spoofing, idle scanning, proxy usage, timing changes, and source-port selection. These techniques are high risk because they can help avoid detection during unauthorized reconnaissance.
The section is explicitly about firewall and IDS evasion and provides ready-to-run commands. This is a strong semantic match for risky offensive behavior.
High
SKILL.md:261-272SKILL.md:275-289SKILL.md:291-310SKILL.md:532-537
Potentially intrusive NSE and brute-force script guidance
The skill recommends broad vulnerability scripts, exploit scripts, SQL injection checks, SMB vulnerability checks, and brute-force related NSE categories. These can disrupt services or cross into exploit validation without strong guardrails.
The file names exploit, brute, intrusive, and vulnerability scripts and shows example commands. Legitimate assessment use is possible, but misuse impact is high.
Medium
assets/ci-config-template.yml:237-240
CI template installs remote script through shell pipe
The CI template includes a curl-to-shell installer for tfsec. This is a supply-chain risk if copied into production because it executes remote content without pinning or verification.
The command is in a template and not hidden runtime behavior, but the pipe-to-shell pattern is real and risky when reused.
Medium
SKILL.md:493-518
Automated security scan script executes network scanning in CI
The skill includes a CI shell script pattern that accepts a target network argument, creates scan output directories, runs Nmap vulnerability scripts, and fails the build on vulnerable output. This is legitimate for owned assets but risky if scope controls are absent.
The code is a clear executable workflow. The target is parameterized, so authorization depends on user governance outside the skill.
Low
assets/ci-config-template.yml:161-165
GitHub token access is scoped to a standard action template
The CI template passes GITHUB_TOKEN to the Gitleaks action. This is a normal GitHub Actions pattern for repository scanning and does not show evidence of credential exfiltration.
The token is used inside a secrets-scanning workflow with standard action syntax. No outbound custom endpoint or suspicious handling was found in this location.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (1)
Low
references/EXAMPLE.md:131-162assets/rule-template.yaml:93-165assets/rule-template.yaml:235-300
Security training examples trigger script and secret patterns
The XSS, secret handling, and weak cryptography detections in references and rule templates are mostly educational examples showing vulnerable and fixed patterns. They do not appear to execute or exfiltrate data by themselves.
The surrounding context labels these as examples, detection patterns, or remediation material. The static hits are real strings but mostly false positives for active malicious behavior.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable