Agent skill

Shodan

Shodan lookups: internet-connected devices, ports, services. An agent skill from taracodlabs/aiden.

Apache-2.0Auto-check passedSecurity

Install Shodan

skills CLI

$ npx skills add taracodlabs/aiden --skill shodan -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install taracodlabs/aiden shodan --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/taracodlabs/aiden.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/shodan .claude/skills/shodan && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "shodan" agent skill from https://github.com/taracodlabs/aiden/tree/main/skills/shodan into .claude/skills/shodan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shodan", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/taracodlabs/aiden/tree/main/skills/shodan

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add taracodlabs/aiden --skill shodan -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install taracodlabs/aiden shodan --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/taracodlabs/aiden.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/shodan .agents/skills/shodan && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "shodan" agent skill from https://github.com/taracodlabs/aiden/tree/main/skills/shodan into .agents/skills/shodan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shodan", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add taracodlabs/aiden --skill shodan -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install taracodlabs/aiden shodan --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/taracodlabs/aiden.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/shodan .cursor/skills/shodan && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "shodan" agent skill from https://github.com/taracodlabs/aiden/tree/main/skills/shodan into .cursor/skills/shodan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shodan", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/taracodlabs/aiden.git --path skills/shodan

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add taracodlabs/aiden --skill shodan -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install taracodlabs/aiden shodan --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/taracodlabs/aiden.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/shodan .gemini/skills/shodan && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "shodan" agent skill from https://github.com/taracodlabs/aiden/tree/main/skills/shodan into .gemini/skills/shodan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shodan", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install taracodlabs/aiden shodan

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add taracodlabs/aiden --skill shodan -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/taracodlabs/aiden.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/shodan .github/skills/shodan && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "shodan" agent skill from https://github.com/taracodlabs/aiden/tree/main/skills/shodan into .github/skills/shodan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shodan", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add taracodlabs/aiden --skill shodan -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install taracodlabs/aiden shodan --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/taracodlabs/aiden.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/shodan .opencode/skills/shodan && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "shodan" agent skill from https://github.com/taracodlabs/aiden/tree/main/skills/shodan into .opencode/skills/shodan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "shodan", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: shodan
GitHub stars: 851
Token cost: ~954 tokens
SKILL.md length: 263 words
Files: 3
Skills in repo: 63
Repo updated: Sep 13, 2026
First seen: Oct 7, 2026
Licence: Apache-2.0

At a glance

Shodan lookups: internet-connected devices, ports, services. An agent skill from taracodlabs/aiden.

Tasks that involve OSINT
SKILL.md covers When to Use, How to Use, Examples and Cautions, plus 1 more section
Runs TypeScript scripts from its folder; reaches api.shodan.io; needs SHODAN_API_KEY

What it does

Shodan is an agent skill from taracodlabs/aiden. Shodan lookups: internet-connected devices, ports, services

Its SKILL.md is about 950 tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files (for example `index.ts` and `skill.json`).

It sits in Security, covering OSINT. The repository describes itself as: Aiden — an autonomous AI agent and work engine built solo. It can operate your browser, terminal, files, apps, APIs, skills and tools, remember context, recover from failures… The licence is Apache-2.0.

When your agent uses it

Tasks that involve OSINT

Example prompts

“/shodan”

Requirements

Node.js
A credential in SHODAN_API_KEY

What it can do on your machine

Read from SKILL.md and the folder at commit 3704204. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships script files (TypeScript), which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
Network
Hosts in commands or code, which the agent is likely to contact:
- api.shodan.io
Also links to:
- account.shodan.io
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names these keys or tokens, usually read from environment variables:
- SHODAN_API_KEY
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Shodan loads about 954 tokens when it runs. Until then it costs about 17 tokens; SKILL.md has 263 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~17
When it runs · the whole SKILL.md, loaded when a task matches: ~954

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from taracodlabs/aiden at commit 3704204, republished under its Apache-2.0 licence (© taracodlabs). 263 words, ~954 tokens.

Download SKILL.mdSave it as .claude/skills/shodan/SKILL.md (or your agent's skills folder). This skill also uses 2 other files; get the full folder from GitHub.

name: shodan
description: Shodan lookups: internet-connected devices, ports, services
category: security
version: 1.0.0
license: Apache-2.0
origin: aiden
tags: security, shodan, osint, recon, ports, services, iot, asset-discovery, cve, infosec
env_required: SHODAN_API_KEY

Shodan — Internet Device Search

Shodan indexes internet-connected devices and exposes metadata: open ports, running services, banners, TLS certificates, and known CVEs. Use it for security audits, reconnaissance, and asset discovery.

Requires: SHODAN_API_KEY — free tier at https://account.shodan.io (1 req/sec, 100 queries/month).

When to Use

User wants to know what ports/services are exposed on a specific IP
User wants to find vulnerable systems of a specific type (e.g. exposed databases)
User is doing a security audit and needs external exposure info
User asks "what does Shodan show for IP X" or "find exposed Redis servers"
Asset discovery: find all internet-exposed assets for a company/ASN

How to Use

Look up a specific IP address

powershell

$ip  = "8.8.8.8"
$key = $env:SHODAN_API_KEY
$url = "https://api.shodan.io/shodan/host/${ip}?key=${key}"

$host = Invoke-RestMethod -Uri $url
Write-Host "IP:           $($host.ip_str)"
Write-Host "Organization: $($host.org)"
Write-Host "OS:           $($host.os)"
Write-Host "Country:      $($host.country_name)"
Write-Host "Open ports:   $($host.ports -join ', ')"
Write-Host ""
Write-Host "Services:"
$host.data | ForEach-Object {
    Write-Host "  Port $($_.port)/$($_.transport) — $($_.product) $($_.version)"
}

Search for exposed services by query

powershell

$query = [Uri]::EscapeDataString("port:27017 product:MongoDB")
$key   = $env:SHODAN_API_KEY
$url   = "https://api.shodan.io/shodan/host/search?query=${query}&key=${key}"

$results = Invoke-RestMethod -Uri $url
Write-Host "Total results: $($results.total)"
$results.matches | Select-Object -First 10 | ForEach-Object {
    Write-Host "  $($_.ip_str):$($_.port) — $($_.org) ($($_.location.country_name))"
}

Find CVEs on a host

powershell

$ip   = "TARGET_IP"
$key  = $env:SHODAN_API_KEY
$host = Invoke-RestMethod -Uri "https://api.shodan.io/shodan/host/${ip}?key=${key}"

if ($host.vulns) {
    Write-Host "CVEs found on ${ip}:"
    $host.vulns.PSObject.Properties | ForEach-Object { Write-Host "  $($_.Name)" }
} else {
    Write-Host "No known CVEs found for ${ip}"
}

port:22 country:IN                  SSH servers in India
product:nginx version:1.14          Specific nginx version
org:"Amazon"                        Amazon-owned IPs
ssl.cert.subject.cn:*.example.com   Certs for a domain
http.title:"Dashboard" port:80      Web dashboards on port 80
vuln:CVE-2021-44228                 Log4Shell vulnerable hosts

Examples

"What is exposed on IP 1.2.3.4?" → Use the host lookup. Shows open ports, services, OS.

"Find all MongoDB servers with no auth" → Query: port:27017 product:MongoDB -authentication

"Search for Apache servers in India" → Query: product:Apache country:IN

"Does this IP have any known CVEs?" → Use the CVE snippet above on the target IP.

Cautions

Free tier: 100 queries/month and 1 request/second — add Start-Sleep -Milliseconds 1100 between bulk calls
Shodan data is cached — it reflects the last scan date, not necessarily the current state
Host lookups and scans data about publicly reachable services only — no active scanning is performed by this skill
Never use Shodan results to attempt unauthorized access; this skill is for reconnaissance and awareness only
The vulns field only appears when Shodan has matched CVE data to the service banner

Requirements

SHODAN_API_KEY — free account at https://account.shodan.io

Files

SKILL.md and 2 other files in skills/shodan of taracodlabs/aiden.

SKILL.md
index.ts
skill.json

Open the folder on GitHubat commit 3704204

Compare with similar skills

Shodan next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Shodan compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Shodan this skilltaracodlabs/aiden	851	—	~954	Automated safety check: Pass	Apache-2.0	25 days ago
Metabigor OSINT Reconj3ssie/metabigor	1.9k	—	~2.4k	Automated safety check: Pass	MIT	2 mo ago
Ctf Osintljagiello/ctf-skills	3.4k	2 repos	~2.3k	Automated safety check: Notes	MIT	25 days ago
ShadowBroker Intelligence ClientBigBodyCobain/Shadowbroker	11k	—	~8.9k	Automated safety check: Warn	AGPL-3.0	2 days ago
Awesome Osint Operatorshoyann/RZK-The-Hunter	140	—	~4.8k	Automated safety check: Pass	CC-BY-SA-4.0	18 days ago
Run Claude Osintelementalsouls/Claude-OSINT	2.8k	—	~1.2k	Automated safety check: Pass	MIT	1 mo ago

Similar skills

Metabigor OSINT Recon
j3ssie/metabigor
Operates the metabigor CLI to map a target's network ranges, subdomains, ports, related domains, CDNs and archived URLs from free sources without API keys.
1.9k GitHub stars~2.4k tokensUpdated 2 mo ago
SecurityAuto-check passed
Ctf Osint
ljagiello/ctf-skills
Provides open source intelligence techniques for CTF challenges.
3.4k GitHub starsUsed in 2 repos~2.3k tokens
SecurityAuto-check: notes
ShadowBroker Intelligence Client
BigBodyCobain/Shadowbroker
Lets an agent query a ShadowBroker OSINT platform for tracked flights, ships, satellites and news, and place its findings on the map as intel pins.
11k GitHub stars~8.9k tokensUpdated 2 days ago
SecurityAuto-check: warnings
Awesome Osint Operator
shoyann/RZK-The-Hunter
Ethical, evidence-first OSINT planning, tool selection, verification, monitoring, reporting, and guarded official wanted/fugitive-person location intelligence using a structured catalog adapted from…
140 GitHub stars~4.8k tokensUpdated 18 days ago
SecurityAuto-check passed
Run Claude Osint
elementalsouls/Claude-OSINT
Build, validate, and run the claude-osint skills repo — check SKILL.md frontmatter, run the secretscan.py and h1reference.py helpers, run sync-skill-content.sh, run the smoke test.
2.8k GitHub stars~1.2k tokensUpdated 1 mo ago
SecurityAuto-check passed
Osint
smixs/osint-skill
Conduct deep OSINT research on individuals. An agent skill from smixs/osint-skill.
140 GitHub stars~5.5k tokensUpdated 7 mo ago
SecurityAuto-check passed

Questions about Shodan

What does Shodan do?

Shodan lookups: internet-connected devices, ports, services. An agent skill from taracodlabs/aiden. Shodan is an agent skill from taracodlabs/aiden.

When should I use Shodan?

Shodan fits situations like: tasks that involve OSINT.

How do I install Shodan in Claude Code?

Run `npx skills add taracodlabs/aiden --skill shodan -a claude-code`. Or copy the skill folder (skills/shodan in taracodlabs/aiden) into .claude/skills/shodan in your project. Claude Code loads it when a task matches its description.

How do I install Shodan in Codex?

Run `npx skills add taracodlabs/aiden --skill shodan -a codex`. Or copy the skill folder (skills/shodan in taracodlabs/aiden) into .agents/skills/shodan in your project. Codex loads it when a task matches its description.

Can I use Shodan in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add taracodlabs/aiden --skill shodan -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/shodan, .gemini/skills/shodan, .github/skills/shodan and .opencode/skills/shodan in your project.

What does Shodan need to run?

Going by SKILL.md and its folder, Shodan needs TypeScript for the scripts in its folder and credentials named SHODAN_API_KEY. Our summary lists: Node.js; A credential in SHODAN_API_KEY.

Does Shodan access the network?

SKILL.md names 2 domains. In commands or code: api.shodan.io; the agent is likely to contact it when it follows the instructions. As links in the text: account.shodan.io. This is read from the text; nothing was executed.

Is Shodan safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Shodan use?

Shodan is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Shodan use?

About 954 tokens (SKILL.md is roughly 3.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Shodan?

Skills that share tags, products or a category with Shodan: Metabigor OSINT Recon (j3ssie/metabigor, 1.9k stars), Ctf Osint (ljagiello/ctf-skills, 3.4k stars), ShadowBroker Intelligence Client (BigBodyCobain/Shadowbroker, 11k stars) and Awesome Osint Operator (shoyann/RZK-The-Hunter, 140 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Shodan?

taracodlabs (a GitHub organization) maintains it in taracodlabs/aiden, which has 851 GitHub stars. The repository holds 63 skills in this directory. The repository was last updated on September 13, 2026.

Source: taracodlabs/aiden on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Shodan

Facts

At a glance

What it does

When your agent uses it

Example prompts

Requirements

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Shodan — Internet Device Search

When to Use

How to Use

Look up a specific IP address

Search for exposed services by query

Find CVEs on a host

Useful Shodan search filters

Examples

Cautions

Requirements

Files

Compare with similar skills

Similar skills

More from taracodlabs/aiden

Related

Questions about Shodan