Nmap Pentest Scans

Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.

This skill appears to be a planner that produces reproducible Nmap command sequences and reports; it enforces scope checks and requires an explicit authorization flag before non-dry-run execution. Before installing or running it: ensure the referenced shared module (autonomous-pentester/shared/pentest_common) is present and trusted in your environment, confirm you understand where the skill will read scope/input files and write artifacts, and be aware the skill will not actually execute nmap commands (you or another tool must run the generated commands). If you expected an automated runner that executes scans, note this skill only generates plans and findings artifacts.

Type: OpenClaw Skill Name: nmap-pentest-scans Version: 0.1.0 The `scripts/nmap_pentest_scans.py` script constructs Nmap commands by directly embedding the user-provided `--target` argument into f-strings without proper shell escaping. This creates a critical shell injection vulnerability. If the AI agent, which is instructed to 'run' these scans via `agents/openai.yaml`, executes the generated commands (e.g., from `recommended-commands.txt` or `scan-plan.json`), a malicious target input could lead to arbitrary command execution on the host running the agent. While the skill includes authorization and scope validation, these do not mitigate the shell injection risk from a malformed but in-scope target.