Skills wsdiscovery
📦

wsdiscovery

Content revision r2 Medium Risk ⚙️ External commands🌐 Network access

Discover ONVIF and WS-Discovery Devices

Finding ONVIF cameras and compatible IoT devices manually is slow. This skill guides WS-Discovery scans and explains device metadata in clear formats.

Supports: Claude Codex Code(CC)
⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "wsdiscovery" from https://skillstore.io/skills/brownfinesecurity-wsdiscovery.md and its manifest at https://skillstore.io/api/skills/brownfinesecurity-wsdiscovery/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/brownfinesecurity-wsdiscovery.md Signed manifest GET /api/skills/brownfinesecurity-wsdiscovery/manifest Signed lockfile GET /api/skills/brownfinesecurity-wsdiscovery/lockfile

Test it

Using "wsdiscovery". Scan an authorized camera at 192.168.1.100 using text output.

Expected outcome:

  • One WS-Discovery endpoint responded at the requested address.
  • The summary lists its device type, identifier, model details, metadata version, and management service endpoint.

Using "wsdiscovery". Investigate why an approved recorder does not appear in discovery.

Expected outcome:

  • No WS-Discovery response was received from the target.
  • Check routing, multicast filtering, firewall rules, device discovery settings, and WS-Discovery support.

Using "wsdiscovery". Summarize an authorized local multicast discovery scan.

Expected outcome:

The inventory groups responding cameras, recorders, printers, and media devices by address, type, manufacturer, model, firmware, and service endpoint.

Security Audit

Medium Risk
v9 • 7/23/2026 Open versioned report

The skill intentionally executes WS-Discovery scans and supports host or multicast discovery. Markdown backticks and private example addresses are mostly scanner false positives, but authorization safeguards are absent.

1
Files scanned
78
Lines analyzed
3
Review items
0
False positives ignored

Confirmed security concerns (6)

Medium
SKILL.md:16-24
Missing Authorization Gate for Network Scanning
The workflow asks for a target and immediately runs discovery without requiring ownership, authorization, or an approved scope.
The documented workflow moves directly from target collection to command execution. No authorization or scope check appears before the scan.
Low
SKILL.md:19
System reconnaissance
- Ask for the target hostname or IP address
The line gathers a hostname or IP specifically for the device-enumeration workflow. This is preparatory targeting for active system reconnaissance.
Low
SKILL.md:25
System reconnaissance
- Basic usage: `wsdiscovery <hostname_or_ip>`
The command probes a selected hostname or IP with a discovery scanner. Its explicit purpose is to identify and enumerate network devices.
Low
SKILL.md:26
System reconnaissance
- For verbose output: `wsdiscovery <hostname_or_ip> -v`
The verbose scan requests full responses from the selected target. This can expose detailed device and service metadata.
Low
SKILL.md:27
System reconnaissance
- For JSON output: `wsdiscovery <hostname_or_ip> --format json`
The command performs device discovery and returns structured enumeration data for the selected target. This is an intended reconnaissance capability.
Low
SKILL.md:19-20
Network reconnaissance
- Ask for the target hostname or IP address
The target request is part of an active WS-Discovery scanning workflow. The surrounding instructions confirm network reconnaissance intent.
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
SKILL.md:25
Ruby/shell backtick execution
- Basic usage: `wsdiscovery <hostname_or_ip>`
This line explicitly directs the agent to execute wsdiscovery with a user-supplied target. The Markdown backticks are not Ruby syntax, but external command execution is intended.
Medium
SKILL.md:26
Ruby/shell backtick execution
- For verbose output: `wsdiscovery <hostname_or_ip> -v`
This line explicitly directs the agent to execute wsdiscovery with verbose output against a user-supplied target. External command execution is intended despite the incorrect Ruby pattern label.
Medium
SKILL.md:27
Ruby/shell backtick execution
- For JSON output: `wsdiscovery <hostname_or_ip> --format json`
This line explicitly directs the agent to execute wsdiscovery and request JSON output. The command accepts a user-supplied target without documented validation.

Risk Factors

⚙️ External commands (13)
SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:52-54 SKILL.md:54-57 SKILL.md:57-59 SKILL.md:59-62 SKILL.md:62-64 SKILL.md:64-67 SKILL.md:67-69
🌐 Network access (4)
SKILL.md:53 SKILL.md:58 SKILL.md:63 SKILL.md:68

Detected Patterns

System reconnaissance×4Network reconnaissance
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/brownfinesecurity-wsdiscovery/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/brownfinesecurity-wsdiscovery/security.svg)](https://skillstore.io/skills/brownfinesecurity-wsdiscovery?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/brownfinesecurity-wsdiscovery?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/brownfinesecurity-wsdiscovery/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/brownfinesecurity-wsdiscovery.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

BrownFineSecurity. (2026). wsdiscovery security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/brownfinesecurity-wsdiscovery/audits/9

BibTeX citation

@techreport{brownfinesecurity-brownfinesecurity-wsdiscovery-2026, author = {BrownFineSecurity}, title = {wsdiscovery security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/brownfinesecurity-wsdiscovery/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "wsdiscovery security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "BrownFineSecurity" date-released: "2026-07-23" url: "https://skillstore.io/skills/brownfinesecurity-wsdiscovery/audits/9" identifiers: - type: other value: "skillstore:brownfinesecurity-wsdiscovery:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
70
Community
91
Spec Compliance

What You Can Build

Inventory Security Cameras

Discover approved ONVIF cameras and record their models, firmware versions, serial numbers, and service endpoints.

Troubleshoot Device Discovery

Use verbose responses to investigate why an authorized camera or recorder is missing from management software.

Inspect IoT Metadata

Review WS-Discovery types, scopes, device identifiers, and XAddr services during integration testing.

Try These Prompts

Discover One Device 
Confirm that {target} is authorized, then run a text WS-Discovery scan. Summarize each responding device and its service endpoints.
Create a Device Inventory 
Scan {authorized_target} with JSON output. Present a concise inventory of addresses, models, firmware versions, serial numbers, and XAddr services.
Diagnose Discovery Responses 
Run a verbose WS-Discovery scan against {authorized_target}. Explain the returned XML fields and identify missing or inconsistent ONVIF metadata.
Assess Authorized Multicast Discovery 
Within the approved local network, query 239.255.255.250. Group responding devices by type and flag outdated firmware or incomplete metadata for review.

Best Practices

  • Confirm ownership, written authorization, and target scope before every scan.
  • Start with a specific host and use multicast only when broad local discovery is approved.
  • Protect verbose responses and inventories because they can contain serial numbers, locations, firmware details, and management endpoints.

Avoid

  • Do not scan public, third-party, or unapproved addresses.
  • Do not insert untrusted target text into a shell command without validation and argument separation.
  • Do not publish verbose XML or device inventories that expose sensitive infrastructure details.

Frequently Asked Questions

What devices can this skill discover?
It can discover reachable cameras, recorders, printers, and IoT devices that advertise through WS-Discovery.
Does it require network access?
Yes. The agent must reach the authorized target or local multicast network.
Which output formats are available?
The documented command supports text, JSON, quiet, and verbose XML-oriented workflows.
Can it discover every camera?
No. Cameras must support WS-Discovery, enable advertisements, and be reachable through current network controls.
Does it change device settings?
No. The documented workflow discovers and reports metadata without authenticating or changing configuration.
Is multicast discovery safe to run anywhere?
No. Use multicast only on a local network where broad device discovery is explicitly authorized.

Developer Details

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/BrownFineSecurity/iothackbot/tree/master/skills/wsdiscovery

Ref

a39a91716eadede5f4cdefd78178fed4e837a128

Maintenance freshness

7/24/2026

Usage

7 downloads · 200 views

File structure

📄 SKILL.md