This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware", "check cloud security", or "evaluate system compliance". It provides comprehensive guidance on security scanning tools and methodologies.
SkillScore83Maintained
Automatic
◆Security & AppSec pack
Last verified 8/10/2026
What it changes
Passed 19 of 23 test cases with the skill, and 15 of 23 without it.
Without skill65%
With skill83%
Checks it passed that the model alone missed
Uses the --script=vuln option.
Specifies the --compliance cis_aws parameter.
Uses the -Tuning 123456789 parameter to run all test groups.
and 2 more in the full report
4 fixed15 passed either way4 still failing0 broke
Pass-rate lift
+17 pp
Tokens
+328%
Agent turns
0%
Response time
-13%
Model gemini-3.6-flashMeasured 8/10/2026v119 of 23 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 4
Prompt
We want to run Nmap's built-in vulnerability detection scripts against target host 192.168.1.50 without running full custom exploitation payloads. What option flag is used?
What was checked, without and with the skill
Checked
Without skill
With skill
Uses the --script=vuln option.
Missed
Passed
case-17 · gemini-3.6-flash · 8/10/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md581 linessingle file
Security Scanning Tools
Purpose
Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories.