Skills network-101
📦
network-101
Content revision r2 High Risk ⚙️ External commands🌐 Network access
Build an Authorized Network Services Lab
Security learners need controlled services for practical enumeration and log analysis. This skill guides authorized HTTP, HTTPS, SNMP, and SMB lab setup and testing.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "network-101" from https://skillstore.io/skills/sickn33-network-101.md and its manifest at https://skillstore.io/api/skills/sickn33-network-101/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "network-101". Plan a safe HTTPS enumeration exercise for my isolated training server.
Expected outcome:
The response confirms authorization, records the target and port, explains certificate checks, defines expected evidence, and includes a stop condition.
Using "network-101". Help me inspect Apache logs after an approved lab test.
Expected outcome:
- Confirm the authorized host and log location.
- Review access and error events without exposing submitted values.
- Summarize timestamps, request methods, response codes, and user agents.
- Remove temporary test data according to the lab cleanup plan.
Security Audit
High Riskv6 • 8/4/2026 Open versioned report
The skill is an authorized network-lab guide, and many alerts are false positives caused by Markdown fences, documentation labels, and private example addresses. Privileged host changes, service persistence, active network enumeration, and binding to all interfaces are confirmed risks. Weak SNMP, anonymous writable SMB, and credential-form examples require stronger isolation and handling guidance.
1
Files scanned
360
Lines analyzed
30
Review items
0
False positives ignored
Confirmed security concerns (7)
High
Systemd service enablement
sudo systemctl enable apache2
The command enables Apache to start automatically at boot. This is a persistent system change, even though the stated purpose is legitimate lab setup.
High
Network scanning tools
nmap -p 443 192.168.1.1
This is an executable enumeration or vulnerability-scanning command against a network target. It can probe systems beyond the lab if authorization and scope checks fail.
High
Network scanning tools
enum4linux -a 192.168.1.1
This is an executable enumeration or vulnerability-scanning command against a network target. It can probe systems beyond the lab if authorization and scope checks fail.
High
Network scanning tools
nmap --script smb-vuln* 192.168.1.1
This is an executable enumeration or vulnerability-scanning command against a network target. It can probe systems beyond the lab if authorization and scope checks fail.
High
Insecure SNMP Lab Configuration
The guide recommends SNMP v1 with public and private community strings, then demonstrates process enumeration and community-string guessing. Exposure outside an isolated lab could disclose system details.
The commands and configuration explicitly use cleartext SNMP v1 and the well-known public community. The skill also acknowledges this protocol limitation.
High
Anonymous Writable SMB Configuration
The sample share enables guest access and disables read-only mode. A reachable lab host could accept unauthorized file changes if the filesystem permissions also permit them.
The Samba configuration explicitly sets guest access to yes and read-only to no. Actual write access still depends on the shown directory permissions and Samba identity mapping.
Medium
Credential Collection Page Without Handling Guidance
The HTTP example creates a login form that requests a username and password. It omits guidance on test credentials, storage, transport, and cleanup.
The example visibly requests password input and posts it to login.php. No backend or exfiltration is shown, but unsafe lab handling could expose entered credentials.
Capability review items (30)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
sudo privilege escalation
sudo apt update && sudo apt install apache2
This command installs or updates system packages with root privileges on line 62. It changes the host and requires explicit operator approval.
High
sudo privilege escalation
sudo systemctl start apache2
This root command changes a system service on line 65, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
High
sudo privilege escalation
sudo systemctl enable apache2
This root command changes a system service on line 66, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
High
sudo privilege escalation
echo "<html><body><h1>Test Page</h1></body></html>" | sudo tee /var/www/html/index.html
This command writes content into a root-owned system or service path on line 69. It makes a privileged host change that requires explicit approval.
High
sudo privilege escalation
sudo ufw allow 80/tcp
This root command changes the host firewall on line 79 and exposes an inbound service. An incorrect target or environment could expand network access.
High
sudo privilege escalation
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
This root command creates a private key and certificate in system directories on line 93. It writes security-sensitive host configuration and needs operator approval.
High
sudo privilege escalation
sudo a2enmod ssl
This command writes content into a root-owned system or service path on line 98. It makes a privileged host change that requires explicit approval.
High
sudo privilege escalation
sudo systemctl restart apache2
This root command changes a system service on line 99, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
High
sudo privilege escalation
sudo nano /etc/apache2/sites-available/default-ssl.conf
This command opens a root-owned service configuration file for modification on line 106. Incorrect edits can weaken or disrupt the host service.
High
sudo privilege escalation
sudo a2ensite default-ssl
This command writes content into a root-owned system or service path on line 109. It makes a privileged host change that requires explicit approval.
High
sudo privilege escalation
sudo systemctl reload apache2
This root command changes a system service on line 110, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
High
sudo privilege escalation
sudo apt install snmpd snmp
This command installs or updates system packages with root privileges on line 134. It changes the host and requires explicit operator approval.
High
sudo privilege escalation
sudo nano /etc/snmp/snmpd.conf
This command opens a root-owned service configuration file for modification on line 137. Incorrect edits can weaken or disrupt the host service.
High
sudo privilege escalation
sudo systemctl restart snmpd
This root command changes a system service on line 144, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
High
sudo privilege escalation
sudo apt install samba
This command installs or updates system packages with root privileges on line 185. It changes the host and requires explicit operator approval.
High
sudo privilege escalation
sudo install -d -m 0770 -o root -g sambashare /srv/samba/share
This root command creates a service directory and assigns permissions on line 188. It changes filesystem ownership and access controls on the host.
High
sudo privilege escalation
sudo nano /etc/samba/smb.conf
This command opens a root-owned service configuration file for modification on line 191. Incorrect edits can weaken or disrupt the host service.
High
sudo privilege escalation
sudo systemctl restart smbd
This root command changes a system service on line 201, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
High
sudo privilege escalation
sudo tail -f /var/log/apache2/access.log
This command reads service logs with root privileges on line 231. Logs can contain sensitive request data and should only be accessed on authorized systems.
High
sudo privilege escalation
sudo tail -f /var/log/apache2/error.log
This command reads service logs with root privileges on line 234. Logs can contain sensitive request data and should only be accessed on authorized systems.
High
sudo privilege escalation
sudo apt install apache2
This command installs or updates system packages with root privileges on line 303. It changes the host and requires explicit operator approval.
High
sudo privilege escalation
sudo systemctl start apache2
This root command changes a system service on line 304, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
High
sudo privilege escalation
cat << 'EOF' | sudo tee /var/www/html/login.html
This command writes content into a root-owned system or service path on line 307. It makes a privileged host change that requires explicit approval.
High
sudo privilege escalation
sudo ufw allow 80/tcp
This root command changes the host firewall on line 320 and exposes an inbound service. An incorrect target or environment could expand network access.
High
sudo privilege escalation
sudo apt install snmpd
This command installs or updates system packages with root privileges on line 327. It changes the host and requires explicit operator approval.
High
sudo privilege escalation
echo "rocommunity public" | sudo tee -a /etc/snmp/snmpd.conf
This command writes content into a root-owned system or service path on line 328. It makes a privileged host change that requires explicit approval.
High
sudo privilege escalation
sudo systemctl restart snmpd
This root command changes a system service on line 329, affecting availability or startup behavior. Running it outside an isolated lab could alter a real host.
High
sudo privilege escalation
sudo apt install samba
This command installs or updates system packages with root privileges on line 339. It changes the host and requires explicit operator approval.
High
sudo privilege escalation
sudo install -d -m 0770 -o root -g sambashare /srv/samba/anonymous
This root command creates a service directory and assigns permissions on line 341. It changes filesystem ownership and access controls on the host.
Medium
Hardcoded IP address
| Cannot connect remotely | Bind service to 0.0.0.0 instead of localhost |
The troubleshooting advice recommends binding a service to 0.0.0.0. This exposes it on every interface and can unintentionally make a weak lab service reachable.
Risk Factors
⚙️ External commands (50)
SKILL.md:60-73 SKILL.md:73-77 SKILL.md:77-83 SKILL.md:83-91 SKILL.md:91-100 SKILL.md:100-104 SKILL.md:104-111 SKILL.md:111-115 SKILL.md:115-124 SKILL.md:124-132 SKILL.md:132-145 SKILL.md:145-154 SKILL.md:154-169 SKILL.md:169-183 SKILL.md:183-202 SKILL.md:202-206 SKILL.md:206-221 SKILL.md:221-229 SKILL.md:229-238 SKILL.md:238-242 SKILL.md:242-248 SKILL.md:248-264 SKILL.md:264-276 SKILL.md:276-301 SKILL.md:301-321 SKILL.md:321-325 SKILL.md:325-333 SKILL.md:333-337 SKILL.md:337-345 SKILL.md:345-352 SKILL.md:81 SKILL.md:62 SKILL.md:65 SKILL.md:66 SKILL.md:69 SKILL.md:79 SKILL.md:93 SKILL.md:98 SKILL.md:99 SKILL.md:106 SKILL.md:109 SKILL.md:110 SKILL.md:134 SKILL.md:137 SKILL.md:144 SKILL.md:185 SKILL.md:188 SKILL.md:191 SKILL.md:201 SKILL.md:231
Detected Patterns
Systemd service enablementNetwork scanning tools×3
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-network-101/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-network-101?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-network-101?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-network-101/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-network-101.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
zebbern. (2026). network-101 security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-network-101/audits/6BibTeX citation
@techreport{zebbern-sickn33-network-101-2026,
author = {zebbern},
title = {network-101 security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/sickn33-network-101/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "network-101 security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-08-04"
url: "https://skillstore.io/skills/sickn33-network-101/audits/6"
identifiers:
- type: other
value: "skillstore:sickn33-network-101:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Create a Training Lab
Configure representative network services in a disposable environment for guided security exercises.
Practice Service Enumeration
Test approved lab hosts and document visible ports, certificates, shares, and SNMP information.
Validate Defensive Logging
Generate authorized lab traffic and inspect Apache logs for requests, errors, and user agents.
Try These Prompts
Plan a Basic HTTP Lab
Create a read-only plan for an isolated HTTP lab. List prerequisites, ports, expected results, and rollback steps. Do not run commands.
Configure HTTPS Safely
Help configure HTTPS on my disposable Linux lab host. Ask for authorization and the exact host before showing commands. Include certificate cleanup steps.
Review an Enumeration Scope
Review my written scope for testing TARGET. Identify permitted ports, tools, rate limits, and stop conditions. Do not scan until I confirm.
Design a Multi-Service Exercise
Design an isolated HTTP, SNMP, and SMB exercise with synthetic data. Include secure containment, expected findings, log evidence, and full teardown procedures.
Best Practices
- Use disposable virtual machines on an isolated network with synthetic accounts and data.
- Confirm the exact target, written authorization, permitted ports, and stop conditions before active testing.
- Record every host change and remove services, firewall rules, credentials, shares, certificates, and logs after the exercise.
Avoid
- Do not run enumeration commands against public, production, or unspecified targets.
- Do not expose SNMP v1 communities, anonymous writable shares, or test login pages beyond the lab network.
- Do not reuse real credentials or retain submitted values in pages, application data, shell history, or logs.
Frequently Asked Questions
Does this skill run commands automatically?
No. It provides procedures and command examples, while execution requires explicit authorization and confirmation.
Can I use this skill on a production network?
No. Use an isolated lab unless the system owner provides written authorization and a precise production testing scope.
Which services does the skill cover?
It covers HTTP, HTTPS, SNMP, SMB, related firewall settings, basic enumeration, and Apache log review.
Why are the SNMP examples risky?
They use cleartext legacy protocols and predictable community strings for training. These settings can disclose system information when exposed.
What access is required?
Service configuration requires administrative access, package installation rights, firewall control, and an approved target environment.
Does the skill include cleanup automation?
No. The guide lacks complete automated rollback, so operators must document and reverse every lab change.