This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using Shodan," "scan IP ranges with Shodan," or "discover IoT devices and open ports." It provides comprehensive guidance for using Shodan's search engine, CLI, and API for penetration testing reconnaissance.
SkillScore83Maintained
Automatic
◆Security & AppSec pack
Last verified 8/30/2026
What it changes
Passed 19 of 23 test cases with the skill, and 16 of 23 without it.
Without skill70%
With skill83%
Checks it passed that the model alone missed
Specifies the search filter port:11211.
Specifies the search filter product:Memcached.
Includes the Shodan network filter syntax net:203.0.113.0/24.
and 3 more in the full report
3 fixed16 passed either way4 still failing0 broke
Pass-rate lift
+13 pp
Tokens
+81%
Agent turns
0%
Response time
+8%
Model gemini-3.6-flashMeasured 8/30/2026v119 of 23 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 3
Prompt
As part of an authorized penetration testing engagement, I need to assess our client's network range 203.0.113.0/24 for exposed services and SSL/TLS certificate issues. Please create a network summary report detailing exposed service banners, certificate misconfigurations, and statistical distributions of discovered assets.
What was checked, without and with the skill
Checked
Without skill
With skill
Includes the Shodan network filter syntax net:203.0.113.0/24.
Missed
Passed
Specifies running shodan stats with facet options for distribution analysis.
Missed
Passed
Recommends executing shodan download to fetch raw banner results for the network range.
Missed
Passed
case-01 · gemini-3.6-flash · 8/30/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md48 linessingle file
Shodan Reconnaissance and Pentesting
Purpose
Provide systematic methodologies for leveraging Shodan as a reconnaissance tool during penetration testing engagements. This skill covers the Shodan web interface, command-line interface (CLI), REST API, search filters, on-demand scanning, and network monitoring capabilities for discovering exposed services, vulnerable systems, and IoT devices.
Inputs / Prerequisites
Shodan Account: Free or paid account at shodan.io
API Key: Obtained from Shodan account dashboard
Target Information: IP addresses, domains, or network ranges to investigate