New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Nmap Scan Management

by automateyournetwork in automateyournetwork/netclaw

Custom nmap scans with arbitrary flags, plus scan history retrieval and management.

Apache-2.0Auto-check passedSecurity

Install Nmap Scan Management

skills CLI
$ npx skills add automateyournetwork/netclaw --skill nmap-scan-management -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install automateyournetwork/netclaw nmap-scan-management --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .claude/skills && cp -r skills-src/workspace/skills/nmap-scan-management .claude/skills/nmap-scan-management && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
nmap-scan-management
GitHub stars
676
Token cost
~1.2k tokens
SKILL.md length
402 words
Files
1
Skills in repo
120
Repo updated
First seen
Licence
Apache-2.0

At a glance

Custom nmap scans with arbitrary flags, plus scan history retrieval and management.

  • Works in 4 steps: Before change: Run a baseline scan and… → Make the change (firewall rule, service… → After change: Run the same scan again → …
  • Running nmap with custom flags
  • SKILL.md covers How to Call the nmap MCP Tools, When to Use, Available Tools and Custom Scans, plus 5 more sections
  • Calls python3

What it does

Nmap Scan Management is an agent skill from automateyournetwork/netclaw. Custom nmap scans with arbitrary flags, plus scan history retrieval and management. Use when running nmap with custom flags, reviewing past scan results, comparing before/after scans, or retrieving a previous scan by ID

Its SKILL.md is about 1.2k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Security, covering Penetration testing. It works with Nmap. The repository describes itself as: An AI agent that claws through your network. The licence is Apache-2.0.

When your agent uses it

  • Running nmap with custom flags
  • Reviewing past scan results
  • Comparing before/after scans
  • Retrieving a previous scan by ID

Example prompts

  • “/nmap-scan-management”

Requirements

  • Python 3

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Before change: Run a baseline scan and note the scan_id
  2. Make the change (firewall rule, service deploy, etc.)
  3. After change: Run the same scan again
  4. Compare: Retrieve both scans and diff the open ports / services

What it can do on your machine

Read from SKILL.md and the folder at commit aa90e7d. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • python3

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Nmap Scan Management loads about 1.2k tokens when it runs. Until then it costs about 60 tokens; SKILL.md has 402 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~60
When it runs · the whole SKILL.md, loaded when a task matches
~1.2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from automateyournetwork/netclaw at commit aa90e7d, republished under its Apache-2.0 licence (© automateyournetwork). 402 words, ~1,204 tokens.

Download SKILL.mdSave it as .claude/skills/nmap-scan-management/SKILL.md (or your agent's skills folder).
name
nmap-scan-management
description
Custom nmap scans with arbitrary flags, plus scan history retrieval and management. Use when running nmap with custom flags, reviewing past scan results, comparing before/after scans, or retrieving a previous scan by ID
license
Apache-2.0
user-invocable
true

nmap Scan Management

How to Call the nmap MCP Tools

bash
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" TOOL_NAME '{"param":"value"}'

When to Use

  • Run nmap with flags not covered by the purpose-built tools
  • Review past scan results without re-scanning
  • Compare before/after scans (pre-change vs post-change)
  • Retrieve a specific scan result by ID

Available Tools

ToolPurpose
nmap_custom_scanRun nmap with arbitrary flags (scope-enforced + audit-logged)
nmap_list_scansList recent saved scans with IDs, timestamps, targets
nmap_get_scanRetrieve full results of a previous scan by ID

Custom Scans

For power users who need flags not covered by the dedicated tools:

bash
# Aggressive scan with version detection
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_custom_scan '{"target":"192.168.1.1","flags":"-A -T4"}'

# Scan specific ports with timing template
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_custom_scan '{"target":"10.0.0.0/24","flags":"-sS -p 22,80,443 -T3 --open"}'

# Idle scan using a zombie host
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_custom_scan '{"target":"192.168.1.1","flags":"-sI 192.168.1.254"}'

# IPv6 scan
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_custom_scan '{"target":"fd00:cc:1:2::1","flags":"-6 -sT -p 179,22,80"}'

Safety: The following are blocked in custom scans:

  • Shell metacharacters (;, &, |, `, $, etc.)
  • Output-writing flags (-oN, -oX, -oG, -oA)
  • Path-based flags (--datadir, --servicedb, --script with path)

Use the dedicated nmap_script_scan or nmap_vuln_scan tools for NSE scripts.

Scan History

List Recent Scans
bash
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_list_scans '{"limit":20}'

Returns newest-first list with scan_id, timestamp, tool used, and target.

Retrieve a Specific Scan
bash
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_get_scan '{"scan_id":"20250307_143022_a1b2c3"}'

Returns the full scan result as originally captured.

Workflow: Before/After Comparison

When validating a change:

  1. Before change: Run a baseline scan and note the scan_id
  2. Make the change (firewall rule, service deploy, etc.)
  3. After change: Run the same scan again
  4. Compare: Retrieve both scans and diff the open ports / services
bash
# Baseline
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_top_ports '{"target":"192.168.1.1","count":1000}'
# Note: scan_id from output, e.g. "20250307_140000_abc123"

# ... make changes ...

# Post-change
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_top_ports '{"target":"192.168.1.1","count":1000}'

# Retrieve both for comparison
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_get_scan '{"scan_id":"20250307_140000_abc123"}'
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_get_scan '{"scan_id":"20250307_141500_def456"}'

Tool Parameters

nmap_custom_scan
  • target (required): IP, hostname, or CIDR range
  • flags (required): Raw nmap flags (do NOT include the target in flags)
nmap_list_scans
  • limit (optional): Max number of scans to return (default: 20, newest first)
nmap_get_scan
  • scan_id (required): The scan_id returned by any scan tool or nmap_list_scans
Show full SKILL.md (161 more words)Show less

Important Rules

  • Custom scans still enforce the CIDR allowlist — out-of-scope targets are rejected
  • Every scan (including custom) is recorded in the audit log
  • All scan results are saved to disk and retrievable by scan_id
  • Do NOT put the target in the flags parameter — it's added automatically
  • Shell injection is blocked — forbidden characters are rejected

Failure Behavior

  • If a tool call fails with an authentication or connection error, check that NMAP_MCP_SCRIPT is set and valid before assuming a data or device problem.
  • On a tool error (timeout, unreachable host, malformed response), report the failure and its error message directly to the user rather than fabricating or guessing at results.
  • For a confirmed read-only call, check connectivity and retry once if appropriate. For any call that changes state or sends a message, a timeout does not prove the action failed: inspect current state or delivery status before retrying, preserve the required approval/change gates, and do not repeat an action whose outcome is unknown.

© automateyournetwork, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in workspace/skills/nmap-scan-management of automateyournetwork/netclaw.

Open the folder on GitHubat commit aa90e7d

Compare with similar skills

Nmap Scan Management next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Nmap Scan Management compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Nmap Scan Management this skillautomateyournetwork/netclaw676—~1.2kAutomated safety check: PassApache-2.0
NmapBrownFineSecurity/iothackbot8591 repos~3.8kAutomated safety check: NotesMIT
Nmap ReconCommonHuman-Lab/nyxstrike157—~639Automated safety check: PassCustom licence
Operate Network Reconcyberful/cyberful135—~1.1kAutomated safety check: PassAGPL-3.0
Recon NmapAgentSecOps/SecOpsAgentKit2201 repos~4.6kAutomated safety check: NotesCustom licence
Nmap ParseSpecterOps/skills706—~738Automated safety check: PassApache-2.0

Similar skills

  • Nmap

    BrownFineSecurity/iothackbot

    Professional network reconnaissance and port scanning using nmap.

    859 GitHub starsUsed in 1 repo~3.8k tokens
    SecurityAuto-check: notes

  • Nmap Recon

    CommonHuman-Lab/nyxstrike

    Network reconnaissance workflow using nmap, masscan, and rustscan via NyxStrike tools

    157 GitHub stars~639 tokensUpdated today
    SecurityAuto-check passed

  • Operate Network Recon

    cyberful/cyberful

    Build a high-fidelity network and service inventory using Nmap, Masscan, packet capture, DNS, and protocol-specific follow-up.

    135 GitHub stars~1.1k tokensUpdated 1 mo ago
    SecurityAuto-check passed

  • Recon Nmap

    AgentSecOps/SecOpsAgentKit

    Network reconnaissance and security auditing using Nmap for port scanning, service enumeration, and vulnerability detection.

    220 GitHub starsUsed in 1 repo~4.6k tokens
    SecurityAuto-check: notes

  • Nmap Parse

    SpecterOps/skills

    Parse nmap scan output and generate actionable recon notes. An agent skill from SpecterOps/skills.

    706 GitHub stars~738 tokensUpdated 16 days ago
    SecurityAuto-check passed

  • Detecting Network Scanning With Ids Signatures

    mukul975/Anthropic-Cybersecurity-Skills

    Detect network reconnaissance and port scanning using Suricata and Snort IDS signatures, threshold-based detection rules, and traffic anomaly analysis to identify Nmap, Masscan, and custom scanning…

    34k GitHub stars~3.5k tokensUpdated 1 mo ago
    SecurityAuto-check passed

More from automateyournetwork/netclaw

All 120 skills in this repo

  • EVE-NG Lab Topology Design

    automateyournetwork/netclaw

    Entry point for designing EVE-NG network labs: classifies the request, gathers missing requirements, proposes options and validates the resulting topology.

    676 GitHub stars~612 tokensUpdated today
    Auto-check passed

  • ACI Policy Change Deployment

    automateyournetwork/netclaw

    Deploys Cisco ACI policy changes only behind an approved ServiceNow Change Request, capturing pre and post-change fault baselines and rolling back automatically on a fault delta.

    676 GitHub stars~4.2k tokensUpdated today
    Auto-check passed

  • Cisco ACI Fabric Health Audit

    automateyournetwork/netclaw

    Runs a phased health audit of a Cisco ACI fabric through MCP tools: node status, links, tenant and policy review, faults and endpoint learning.

    676 GitHub stars~2.9k tokensUpdated today
    Auto-check passed

  • Anta Validation

    automateyournetwork/netclaw

    Validate Arista EOS network state against ANTA's pre-built 208-test catalogue, with structured pass/fail verdicts.

    676 GitHub stars~1.2k tokensUpdated today
    Auto-check passed

  • Arista Cvp

    automateyournetwork/netclaw

    Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools).

    676 GitHub stars~2.2k tokensUpdated today
    Auto-check: notes

  • AWS Cloud Monitoring

    automateyournetwork/netclaw

    AWS CloudWatch monitoring — metrics, alarms, log queries, VPC flow log analysis, network performance.

    676 GitHub stars~1k tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about Nmap Scan Management

What does Nmap Scan Management do?

Custom nmap scans with arbitrary flags, plus scan history retrieval and management. Nmap Scan Management is an agent skill from automateyournetwork/netclaw. Custom nmap scans with arbitrary flags, plus scan history retrieval and management.

When should I use Nmap Scan Management?

Nmap Scan Management fits situations like: running nmap with custom flags; reviewing past scan results; comparing before/after scans; retrieving a previous scan by ID.

How do I install Nmap Scan Management in Claude Code?

Run `npx skills add automateyournetwork/netclaw --skill nmap-scan-management -a claude-code`. Or copy the skill folder (workspace/skills/nmap-scan-management in automateyournetwork/netclaw) into .claude/skills/nmap-scan-management in your project. Claude Code loads it when a task matches its description.

How do I install Nmap Scan Management in Codex?

Run `npx skills add automateyournetwork/netclaw --skill nmap-scan-management -a codex`. Or copy the skill folder (workspace/skills/nmap-scan-management in automateyournetwork/netclaw) into .agents/skills/nmap-scan-management in your project. Codex loads it when a task matches its description.

Can I use Nmap Scan Management in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add automateyournetwork/netclaw --skill nmap-scan-management -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/nmap-scan-management, .gemini/skills/nmap-scan-management, .github/skills/nmap-scan-management and .opencode/skills/nmap-scan-management in your project.

What does Nmap Scan Management need to run?

Going by SKILL.md and its folder, Nmap Scan Management needs the command-line tools its instructions call (python3). Our summary lists: Python 3.

Does Nmap Scan Management access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Nmap Scan Management safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Nmap Scan Management use?

Nmap Scan Management is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Nmap Scan Management use?

About 1.2k tokens (SKILL.md is roughly 4.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Nmap Scan Management?

Skills that share tags, products or a category with Nmap Scan Management: Nmap (BrownFineSecurity/iothackbot, 859 stars), Nmap Recon (CommonHuman-Lab/nyxstrike, 157 stars), Operate Network Recon (cyberful/cyberful, 135 stars) and Recon Nmap (AgentSecOps/SecOpsAgentKit, 220 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Nmap Scan Management?

automateyournetwork (a GitHub user) maintains it in automateyournetwork/netclaw, which has 676 GitHub stars. The repository holds 120 skills in this directory. The repository was last updated on October 9, 2026.

Source: automateyournetwork/netclaw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.