Network Scanner

This skill appears to implement a local network scanner and is coherent with its description, but consider the following before installing or giving it runtime privileges: - Missing binary declarations: The SKILL.md lists only nmap and dig as required, but the script calls ip, grep, awk, head and uses sudo — ensure those tools exist and are expected on your system. - Command-construction risk: The script builds shell commands with f-strings and uses subprocess.run(shell=True). If you or the agent pass untrusted or specially-crafted network names/CIDRs (for example via the config file or CLI), that could be abused to execute shell commands. This is a coding-level risk — audit the script or run it in a restricted environment if you cannot review it. - Sudo: For accurate MAC discovery the script recommends sudo. Only run with elevated privileges if you trust the code and understand the implications. - Legal/ethical: Even with safety checks, scanning networks you don't own or have permission to scan may violate terms of service or law. The script has blocking checks, but you should personally confirm you’re scanning authorized private networks. If you decide to proceed: (1) review the full scripts/scan.py contents yourself, (2) add missing required binaries to the documentation, (3) consider hardening run_cmd to avoid shell=True or sanitize inputs, and (4) run the tool locally (not with agent autonomy) until you’re comfortable with its behavior.