Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories.
SkillScore96Maintained
Automatic
◆Security & AppSec pack
Last verified 8/28/2026
What it changes
Passed 24 of 25 test cases with the skill, and 20 of 25 without it.
Without skill80%
With skill96%
Checks it passed that the model alone missed
Uses the -Tuning 123456789 flag
Uses the --compliance cis_aws flag
Uses the nessuscli scan --launch syntax
and 1 more in the full report
4 fixed20 passed either way1 still failing0 broke
Pass-rate lift
+16 pp
Tokens
+313%
Agent turns
0%
Response time
-36%
Model gemini-3.6-flashMeasured 8/28/2026v1 · latest is v224 of 25 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
This benchmark measured an earlier version of the skill.
See it in action
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 4
Prompt
When performing a Lynis audit on a Linux host, how do you instruct the tool to load a custom profile file named 'server'?
What was checked, without and with the skill
Checked
Without skill
With skill
Uses the --profile option with value server
Missed
Passed
case-14 · gemini-3.6-flash · 8/28/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md54 lines2 files
⚠️ AUTHORIZED USE ONLY
This skill is for educational purposes or authorized security assessments only.
You must have explicit, written permission from the system owner before using this tool.
Misuse of this tool is illegal and strictly prohibited.
Mandatory confirmation gate
Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
Ask the user to state the exact target URL, IP, account, or resource.
Ask the user to confirm written authorization and the permitted scope.
Show the exact command(s) and explain their expected effect.
Wait for explicit confirmation in the current conversation.
Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
Security Scanning Tools
Detailed Guide
Read the detailed guide before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.