Network Scan

Scans specified network targets and ports using nmap with options for speed, timeout, host limits, and exclusions, returning detailed JSON results.

This skill implements nmap-based network scanning and the code matches that purpose, but it fails to declare that it needs the nmap binary and the python 'nmap' library. Before installing or using: (1) ensure you have permission to scan the target networks (unauthorized scanning can be illegal or disruptive); (2) install nmap on the host and the python-nmap package, or the tool will return an error; (3) consider testing locally on a lab network first; (4) review the code (it does not exfiltrate data or call external endpoints), but note the unused 'subprocess' import and the skill will produce the exact nmap command line it runs — verify that output if you need auditability; (5) if you want clearer safety, ask the publisher to add an install spec and explicit documentation of the nmap/python-nmap requirements and to limit autonomous invocation or add usage constraints.

Type: OpenClaw Skill Name: network-scan Version: 1.0.0 The skill performs network scanning using `nmap` via the `python-nmap` library. While the `SKILL.md` is benign and the `target` parameter undergoes some validation, the `main.py` script is classified as suspicious due to the lack of comprehensive input validation for the `ports` and `exclude` parameters. These user-controlled inputs are directly incorporated into the `nmap` command arguments. Although the `python-nmap` library generally mitigates direct shell injection by passing arguments as a list, the absence of robust sanitization for all parameters represents a vulnerability that could be exploited if `nmap` or `python-nmap` has an unknown flaw in argument handling, potentially leading to unintended command execution or resource exhaustion.