network-device-scanner

扫描局域网内活跃设备及其开放端口，返回格式化Markdown表格。触发场景：(1) 用户说"查一下周边设备有哪些"、"扫描周边设备"、"看看网络有哪些设备"、"局域网有哪些设备" (2) 用户提到IP地址、MAC地址、端口扫描相关的查询

Before installing or running this skill: (1) review the scripts yourself — they will actively probe IPs and ports on your local network (ARP, ping, TCP connect). Running them on networks you don't own or without permission can be illegal or disruptive. (2) Note the scripts are hard-coded to 172.16.10.0/24 and add 172.16.10.234 — edit the NETWORK/addresses or set SCAN_EXTRA_IPS if you need a different subnet. (3) SKILL.md mentions a Windows PowerShell script (scripts/scan.ps1) that is not included; Windows instructions as written will fail. (4) The tool does not exfiltrate results to external endpoints, but prints scan output locally — still treat scan output as sensitive. (5) Prefer running in a controlled environment or test VLAN first; if you proceed, run the Python/Node files with a non-privileged account and monitor network/security policies. If you need higher assurance, ask the publisher for a missing PowerShell script and for the ability to configure target subnet via parameters rather than hard-coded values.

Type: OpenClaw Skill Name: network-device-scanner Version: 1.0.1 The skill implements a network and port scanner targeting a specific hardcoded subnet (172.16.10.0/24) using Python (scripts/scan.py) and Node.js (scripts/scan.cjs). It employs high-risk capabilities including multi-threaded TCP port scanning and the execution of system commands such as 'arp', 'nmap', and 'fping' to discover local devices. While these actions are consistent with the stated purpose of network management, the use of reconnaissance techniques and shell execution qualifies as suspicious behavior under the security review criteria, despite the lack of evidence for data exfiltration or malicious intent.