securityby automateyournetwork
Service Detection & Vulnerability Scanning with nmap
automateyournetwork/nmap-service-detection
Service fingerprinting, OS detection, NSE script execution, and vulnerability scanning using nmap MCP.
What it changes
Passed 15 of 19 test cases with the skill, and 4 of 19 without it.
Without skill23%
With skill77%
Checks it passed that the model alone missed
- Invokes nmap_full_recon tool
- Invokes nmap_script_scan tool
- Uses default ports value common
and 12 more in the full report
12 fixed5 passed either way5 still failing0 broke
- Pass-rate lift
- +55 pp
- Tokens
- +82%
- Agent turns
- 0%
- Response time
- -35%
Model gemini-3.6-flashMeasured 8/16/2026v117 of 22 cases passed with skill · 19 comparable
See it in action
One of 12 test cases the skill fixed. Same model, same prompt, with and without the skill.
PromptIdentify service versions on host 172.16.1.1 without specifying a port list.
What was checked, without and with the skill| Checked | Without skill | With skill |
|---|
| Invokes nmap_service_detection tool | Missed | Passed |
|---|
| Uses default ports value common | Missed | Passed |
|---|
What's inside
The instructions your model reads when the skill loads.
SKILL.md142 linessingle file
Service Detection & Vulnerability Scanning with nmap
How to Call the nmap MCP Tools
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" TOOL_NAME '{"param":"value"}'
When to Use
- Identify what software/version is running on an open port
- Fingerprint the OS of a network device or server
- Run targeted NSE scripts (SSL cert check, banner grab, protocol probe)
- Scan for known CVEs and common misconfigurations
- Full reconnaissance sweep of a single host or small range
Available Tools
Workflow: Service Identification
When asked "what's running on this host?" or "identify the services":
Step 1: Service Version Detection
python3 $MCP_CALL "python3 -u $NMAP_MCP_SCRIPT" nmap_service_detection '{"target":"192.168.1.1","ports":"common","intensity":7}'
Returns per-port: service name, product, version, CPE identifier.
Step 2: OS Fingerprinting
Track record
Benchmark
15 / 19
test cases passed, vs 4 / 19 without
Adoption
- Users
- 0
- Times used
- 0
Safety and source details
SkillSafety
✓ 3 of 3 passed✓Code scan15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026
View 15 scanner checks
live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing
✓IntentSafe
LLM judge · does the skill do what it claims
✓ContentClean
LLM judge · policy & harmful-content review
Source
Importedautomateyournetwork / netclaw
workspace/skills/nmap-service-detection/SKILL.md
License Apache-2.0Imported 8/3/2026Version v1