Agent skill

Nmap Recon

by CommonHuman-Lab in CommonHuman-Lab/nyxstrike

Network reconnaissance workflow using nmap, masscan, and rustscan via NyxStrike tools

Custom licenceAuto-check passedSecurity

Install Nmap Recon

skills CLI
$ npx skills add CommonHuman-Lab/nyxstrike --skill nmap-recon -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install CommonHuman-Lab/nyxstrike nmap-recon --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/CommonHuman-Lab/nyxstrike.git skills-src && mkdir -p .claude/skills && cp -r skills-src/AI/skills/nmap-recon .claude/skills/nmap-recon && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
nmap-recon
GitHub stars
157
Token cost
~639 tokens
SKILL.md length
263 words
Files
1
Skills in repo
5
Repo updated
First seen
Licence
Custom licence

At a glance

Network reconnaissance workflow using nmap, masscan, and rustscan via NyxStrike tools

  • Works in 4 steps: Fast port discovery (rustscan or masscan) → Service & version detection (nmap) → Targeted NSE scripts (optional) → …
  • Tasks that involve Penetration testing
  • SKILL.md covers Workflow, Tips and NyxStrike Tool Reference
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Nmap Recon is an agent skill from CommonHuman-Lab/nyxstrike. Network reconnaissance workflow using nmap, masscan, and rustscan via NyxStrike tools

Its SKILL.md is about 640 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Security, covering Penetration testing and Bug bounty. It works with Nmap. The repository describes itself as: AI Powered penetration testing Platform for offensive security research.

When your agent uses it

  • Tasks that involve Penetration testing
  • Tasks that involve Bug bounty

Example prompts

  • “/nmap-recon”

Workflow steps

4 steps, taken from the step headings in SKILL.md.

  1. Fast port discovery (rustscan or masscan)
  2. Service & version detection (nmap)
  3. Targeted NSE scripts (optional)
  4. ARP scan (local network only)

What it can do on your machine

Read from SKILL.md and the folder at commit 3ac7449. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Nmap Recon loads about 639 tokens when it runs. Until then it costs about 24 tokens; SKILL.md has 263 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~24
When it runs · the whole SKILL.md, loaded when a task matches
~639

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 263 words (~639 tokens).

“Step-by-step network reconnaissance skill for NyxStrike. Use this skill when a user asks to scan a host, discover open ports, enumerate services, or perform OS detection.”

— opening of SKILL.md by CommonHuman-Lab, Custom licence
name
nmap-recon

Read the full SKILL.md on GitHub

Files

Just SKILL.md in AI/skills/nmap-recon of CommonHuman-Lab/nyxstrike.

Open the folder on GitHubat commit 3ac7449

Compare with similar skills

Nmap Recon next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Nmap Recon compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Nmap Recon this skillCommonHuman-Lab/nyxstrike157—~639Automated safety check: PassCustom licence
Operate Network Reconcyberful/cyberful135—~1.1kAutomated safety check: PassAGPL-3.0
Add Partial Reconsamugit83/redamon3k—~1.1kAutomated safety check: PassMIT
NmapBrownFineSecurity/iothackbot8582 repos~3.8kAutomated safety check: NotesMIT
Project Settings Cascadesamugit83/redamon3k—~2.4kAutomated safety check: PassMIT
Recon NmapAgentSecOps/SecOpsAgentKit2201 repos~4.6kAutomated safety check: NotesCustom licence

Similar skills

  • Operate Network Recon

    cyberful/cyberful

    Build a high-fidelity network and service inventory using Nmap, Masscan, packet capture, DNS, and protocol-specific follow-up.

    135 GitHub stars~1.1k tokensUpdated 1 mo ago
    SecurityAuto-check passed
  • Add Partial Recon

    samugit83/redamon

    Adding partial-recon support for a tool: running a single pipeline phase on demand from the workflow graph, reading its inputs from the existing Neo4j graph and merging results back.

    3k GitHub stars~1.1k tokensUpdated today
    SecurityAuto-check passed
  • Nmap

    BrownFineSecurity/iothackbot

    Professional network reconnaissance and port scanning using nmap.

    858 GitHub starsUsed in 2 repos~3.8k tokens
    SecurityAuto-check: notes
  • Project Settings Cascade

    samugit83/redamon

    Changing or adding a project setting / default value in RedAmon.

    3k GitHub stars~2.4k tokensUpdated today
    SecurityAuto-check passed
  • Recon Nmap

    AgentSecOps/SecOpsAgentKit

    Network reconnaissance and security auditing using Nmap for port scanning, service enumeration, and vulnerability detection.

    220 GitHub starsUsed in 1 repo~4.6k tokens
    SecurityAuto-check: notes
  • Nmap Parse

    SpecterOps/skills

    Parse nmap scan output and generate actionable recon notes. An agent skill from SpecterOps/skills.

    702 GitHub stars~738 tokensUpdated 14 days ago
    SecurityAuto-check passed

More from CommonHuman-Lab/nyxstrike

  • Cloud Audit

    CommonHuman-Lab/nyxstrike

    Cloud and container security auditing workflow using prowler, trivy, kube-hunter, and docker-bench for AWS, GCP, Azure, Kubernetes, and container images

    157 GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Subdomain Enum

    CommonHuman-Lab/nyxstrike

    Subdomain and DNS enumeration workflow using subfinder, amass, dnsenum, fierce, theharvester, gau, and waybackurls

    157 GitHub stars~858 tokensUpdated today
    Auto-check passed
  • Web Recon

    CommonHuman-Lab/nyxstrike

    Web content discovery and technology fingerprinting using gobuster, ffuf, feroxbuster, katana, httpx, and wafw00f

    157 GitHub stars~907 tokensUpdated today
    Auto-check passed
  • Web Vuln

    CommonHuman-Lab/nyxstrike

    Web vulnerability scanning workflow covering SQLi, XSS, template injection, and generic CVE detection using nuclei, sqlmap, dalfox, nikto, and jaeles

    157 GitHub stars~896 tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about Nmap Recon

What does Nmap Recon do?

Network reconnaissance workflow using nmap, masscan, and rustscan via NyxStrike tools. Nmap Recon is an agent skill from CommonHuman-Lab/nyxstrike.

When should I use Nmap Recon?

Nmap Recon fits situations like: tasks that involve Penetration testing; tasks that involve Bug bounty.

How do I install Nmap Recon in Claude Code?

Run `npx skills add CommonHuman-Lab/nyxstrike --skill nmap-recon -a claude-code`. Or copy the skill folder (AI/skills/nmap-recon in CommonHuman-Lab/nyxstrike) into .claude/skills/nmap-recon in your project. Claude Code loads it when a task matches its description.

How do I install Nmap Recon in Codex?

Run `npx skills add CommonHuman-Lab/nyxstrike --skill nmap-recon -a codex`. Or copy the skill folder (AI/skills/nmap-recon in CommonHuman-Lab/nyxstrike) into .agents/skills/nmap-recon in your project. Codex loads it when a task matches its description.

Can I use Nmap Recon in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add CommonHuman-Lab/nyxstrike --skill nmap-recon -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/nmap-recon, .gemini/skills/nmap-recon, .github/skills/nmap-recon and .opencode/skills/nmap-recon in your project.

What does Nmap Recon need to run?

SKILL.md names no scripts, command-line tools or credentials: Nmap Recon is instructions for the agent only.

Does Nmap Recon access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Nmap Recon safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Nmap Recon use?

Nmap Recon has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Nmap Recon use?

About 639 tokens (SKILL.md is roughly 2.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Nmap Recon?

Skills that share tags, products or a category with Nmap Recon: Operate Network Recon (cyberful/cyberful, 135 stars), Add Partial Recon (samugit83/redamon, 3k stars), Nmap (BrownFineSecurity/iothackbot, 858 stars) and Project Settings Cascade (samugit83/redamon, 3k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Nmap Recon?

CommonHuman-Lab (a GitHub user) maintains it in CommonHuman-Lab/nyxstrike, which has 157 GitHub stars. The repository holds 5 skills in this directory. The repository was last updated on October 7, 2026.

Source: CommonHuman-Lab/nyxstrike on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.