Security Scanner

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could help run scans that generate network traffic and probe services, so misuse could create legal, operational, or trust issues.

Why it was flagged

This is an active full-port and service scan command; it is purpose-aligned for a security scanner, but it can be intrusive or unauthorized if run against the wrong target.

Skill content
nmap -p- -sV -sC -A TARGET -oN full_scan.txt
Recommendation

Only use this skill for systems you own or have written permission to test, and provide a precise target scope before running scans.

What this means

Results and safety depend on whatever local scanner binaries are installed, which may vary by machine or provenance.

Why it was flagged

The skill documentation references external tools, but the registry metadata does not declare or install them, so users must ensure they are using trusted, up-to-date installations.

Skill content
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Recommendation

Install security tools from trusted sources, keep them updated, and verify versions before relying on scan results.