Security Scanner

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a benign, instruction-only security scanning guide, but it can direct active scans that should only be run on authorized targets using trusted tool installations.

Before installing or using this skill, confirm that you have authorization for each target, specify exact targets or subnets, avoid broad scans unless approved, and use trusted local installations of the referenced security tools.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could help run scans that generate network traffic and probe services, so misuse could create legal, operational, or trust issues.

Why it was flagged

This is an active full-port and service scan command; it is purpose-aligned for a security scanner, but it can be intrusive or unauthorized if run against the wrong target.

Skill content
nmap -p- -sV -sC -A TARGET -oN full_scan.txt
Recommendation

Only use this skill for systems you own or have written permission to test, and provide a precise target scope before running scans.

What this means

Results and safety depend on whatever local scanner binaries are installed, which may vary by machine or provenance.

Why it was flagged

The skill documentation references external tools, but the registry metadata does not declare or install them, so users must ensure they are using trusted, up-to-date installations.

Skill content
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Recommendation

Install security tools from trusted sources, keep them updated, and verify versions before relying on scan results.