Skills shodan-reconnaissance
📦
shodan-reconnaissance
v1.1 Content revision r1 High Risk ⚙️ External commands🌐 Network access🔑 Env variables
Conduct Authorized Shodan Reconnaissance
Exposed internet assets create risk when teams cannot see them. This skill provides Shodan workflows for authorized searches, filters, exports, and reports.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "shodan-reconnaissance" from https://skillstore.io/skills/sickn33-shodan-reconnaissance.md and its manifest at https://skillstore.io/api/skills/sickn33-shodan-reconnaissance/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "shodan-reconnaissance". Find exposed services for an owned example.com domain.
Expected outcome:
A concise asset inventory with hostnames, IP addresses, observed ports, products, versions, and validation steps.
Using "shodan-reconnaissance". Summarize Shodan results for an authorized cloud IP range.
Expected outcome:
- Exposure summary grouped by service and region.
- Likely stale records separated from current scan candidates.
- Recommended owner validation and remediation priorities.
Using "shodan-reconnaissance". Prepare a report from downloaded Shodan data.
Expected outcome:
A human-readable report outline with findings, affected assets, evidence notes, limitations, and authorized follow-up actions.
Security Audit
High Riskv5 • 7/7/2026 Open versioned report
Most Ruby backtick, API-key, hardcoded-IP, and certificate findings are documentation false positives because they are Markdown examples or placeholders. Confirmed issues include the elevated installation command, Shodan API network calls, and reconnaissance workflows for active scanning and exposed vulnerable services. No prompt injection attempt was found in SKILL.md.
1
Files scanned
509
Lines analyzed
4
Review items
0
False positives ignored
Confirmed security concerns (6)
High
Dual-Use Vulnerable Target Discovery
The skill lists Shodan queries for webcams, exposed databases, default passwords, vulnerable RDP, industrial systems, open VNC, and Docker APIs. These are useful for authorized defense but can also support unauthorized target selection.
The listed queries directly target exposed and vulnerable internet services. The file includes authorization language, but the targeting examples remain clearly dual-use.
High
Active Scanning Workflow With Limited Guardrails
The skill provides Shodan on-demand scan submission commands and monitoring steps. It states that authorization is required, but the workflow can be applied to arbitrary targets if the user supplies them.
The scan submit commands are explicit active reconnaissance instructions. Legal requirements are present, but there is no stronger refusal or scope-check workflow in the skill text.
Medium
Bulk Exposure Data Collection
The skill explains downloading all available Shodan results and parsing host, port, hostname, and organization data. This can collect large third-party exposure datasets without data minimization guidance.
The download and parse examples are direct workflows for collecting and exporting host data. Legitimate reporting is possible, but the file does not add handling, redaction, or retention safeguards.
Low
System reconnaissance
shodan parse --fields ip_str,port,hostnames results.json.gz
This line describes extracting hostnames or domain data from Shodan results, which is reconnaissance capability. It is dual-use and should remain limited to authorized targets.
Low
System reconnaissance
hostname:example.com # Hostname contains
This line describes extracting hostnames or domain data from Shodan results, which is reconnaissance capability. It is dual-use and should remain limited to authorized targets.
Low
System reconnaissance
| Domain enumeration | `hostname:example.com` |
This line describes extracting hostnames or domain data from Shodan results, which is reconnaissance capability. It is dual-use and should remain limited to authorized targets.
Capability review items (4)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
sudo privilege escalation
sudo pacman -S python-shodan
The skill documents sudo pacman -S python-shodan, which asks a user or agent to run a package installation with elevated privileges. That can modify the host and should require explicit confirmation.
Low
Hardcoded URL
curl -s "https://api.shodan.io/api-info?key=YOUR_KEY" | jq
The curl example sends requests to the external Shodan API and includes an API key in the URL. This is a legitimate endpoint for the skill, but it is still external network traffic with possible key exposure in logs.
Low
Hardcoded URL
curl -s "https://api.shodan.io/shodan/host/1.1.1.1?key=YOUR_KEY" | jq
The curl example sends requests to the external Shodan API and includes an API key in the URL. This is a legitimate endpoint for the skill, but it is still external network traffic with possible key exposure in logs.
Low
Hardcoded URL
curl -s "https://api.shodan.io/shodan/host/search?key=YOUR_KEY&query=apache" | jq
The curl example sends requests to the external Shodan API and includes an API key in the URL. This is a legitimate endpoint for the skill, but it is still external network traffic with possible key exposure in logs.
Risk Factors
⚙️ External commands (97)
SKILL.md:39-48 SKILL.md:48-51 SKILL.md:51-59 SKILL.md:59-62 SKILL.md:62-71 SKILL.md:71-76 SKILL.md:76-90 SKILL.md:90-93 SKILL.md:93-99 SKILL.md:99-104 SKILL.md:104-110 SKILL.md:110-113 SKILL.md:113-119 SKILL.md:119-122 SKILL.md:122-129 SKILL.md:129-132 SKILL.md:132-141 SKILL.md:141-144 SKILL.md:144-153 SKILL.md:153-158 SKILL.md:158-164 SKILL.md:164-167 SKILL.md:167-174 SKILL.md:174-177 SKILL.md:177-180 SKILL.md:180-183 SKILL.md:183-192 SKILL.md:192-195 SKILL.md:195-198 SKILL.md:198-201 SKILL.md:201-204 SKILL.md:204-209 SKILL.md:209-218 SKILL.md:218-221 SKILL.md:221-230 SKILL.md:230-233 SKILL.md:233-236 SKILL.md:236-241 SKILL.md:241-250 SKILL.md:250-255 SKILL.md:255-261 SKILL.md:261-266 SKILL.md:266-275 SKILL.md:275-278 SKILL.md:278-295 SKILL.md:295-303 SKILL.md:303-304 SKILL.md:304-305 SKILL.md:305-306 SKILL.md:306-307 SKILL.md:307-308 SKILL.md:308-309 SKILL.md:309-310 SKILL.md:310-311 SKILL.md:311-312 SKILL.md:312-313 SKILL.md:313-321 SKILL.md:321-322 SKILL.md:322-323 SKILL.md:323-324 SKILL.md:324-325 SKILL.md:325-326 SKILL.md:326-327 SKILL.md:327-328 SKILL.md:328-329 SKILL.md:329-330 SKILL.md:330-331 SKILL.md:331-332 SKILL.md:332-333 SKILL.md:333-334 SKILL.md:334-335 SKILL.md:335-341 SKILL.md:341-342 SKILL.md:342-343 SKILL.md:343-344 SKILL.md:344-345 SKILL.md:345-346 SKILL.md:346-347 SKILL.md:347-383 SKILL.md:383-395 SKILL.md:395-398 SKILL.md:398-407 SKILL.md:407-410 SKILL.md:410-422 SKILL.md:422-425 SKILL.md:425-434 SKILL.md:434-437 SKILL.md:437-479 SKILL.md:479-482 SKILL.md:482-494 SKILL.md:494-500 SKILL.md:500 SKILL.md:502-503 SKILL.md:503-504 SKILL.md:504-505 SKILL.md:505 SKILL.md:47
🌐 Network access (18)
🔑 Env variables (5)
Detected Patterns
System reconnaissance×3
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-shodan-reconnaissance/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-shodan-reconnaissance?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-shodan-reconnaissance?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-shodan-reconnaissance/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-shodan-reconnaissance.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). shodan-reconnaissance security audit report (audit version 5) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-shodan-reconnaissance/audits/5BibTeX citation
@techreport{sickn33-sickn33-shodan-reconnaissance-2026,
author = {sickn33},
title = {shodan-reconnaissance security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-shodan-reconnaissance/audits/5},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "shodan-reconnaissance security audit report (audit version 5)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-shodan-reconnaissance/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-shodan-reconnaissance:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
70
Community
78
Spec Compliance
What You Can Build
External Exposure Review
Find public services for owned domains and networks before publishing an exposure report.
Pentest Reconnaissance Prep
Build an authorized target inventory with ports, products, versions, and likely vulnerabilities.
Incident Scoping
Search Shodan for exposed indicators, affected services, and public infrastructure during response.
Try These Prompts
Check One Host
Use this skill to plan a Shodan lookup for this authorized IP address: [IP]. Summarize expected fields and safe next steps.
Inventory Owned Domain
Create Shodan queries for the owned domain [DOMAIN]. Include hostname, organization, product, and port filters with reporting notes.
Review Vulnerable Services
Given these authorized targets [SCOPE], design Shodan searches for exposed vulnerable services and explain validation limits.
Plan a Reconnaissance Workflow
Build a full Shodan reconnaissance workflow for [CLIENT SCOPE]. Include authorization checks, credit use, exports, evidence handling, and final deliverables.
Best Practices
- Use only targets where you have written authorization.
- Store Shodan API keys outside prompts and shared files.
- Record query dates, filters, credits, and data freshness in reports.
Avoid
- Searching random vulnerable devices without permission.
- Treating stale Shodan data as proof without validation.
- Publishing raw banners, screenshots, or host lists that expose third parties.
Frequently Asked Questions
Does this skill run Shodan automatically?
It provides workflows and command examples. Any real query or scan still requires user action and valid credentials.
Is this only for paid Shodan accounts?
No. Basic lookups can work on free accounts, but filtered searches, exports, scans, and history may need credits.
Can it prove that a system is vulnerable?
No. Shodan data is an indicator. Confirm findings with authorized validation and current asset owner records.
How should API keys be handled?
Use secure local configuration, environment variables, or secret storage. Do not paste real keys into shared prompts or files.
Can it scan any public IP range?
No. Active scans and targeted reconnaissance should be limited to networks where you have explicit authorization.
What output should teams expect?
Typical output includes asset inventories, service summaries, CVE indicators, export plans, and report-ready limitations.
Developer Details
Author
sickn33License
MIT
Author version
v1.1
Skillstore revision
r1
Version notice
The author-declared version is not valid SemVer.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/shodan-reconnaissanceRef
9f814fc6a43fd99946f2da5e0df231c65a38bc76
Maintenance freshness
7/18/2026
Usage
9 downloads · 189 views
File structure
📄 SKILL.md