skills.rest
stanz-stanz
stanz-stanzCOMMUNITY
Explore all skills by this author →
GitHub

network-security

Execute and validate authorized vulnerability scans with structured JSON output.

Updated Aug 27, 2026
Search Tags:#nmap#httpx#nuclei#network-security#vulnerability-scanning#consent-check
One-click install
npx skills add https://github.com/stanz-stanz/heimdall --skill network-security-stanz-stanz
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: network-security
Source: https://github.com/stanz-stanz/heimdall/tree/main/.claude/agents/network-security
Command: npx skills add https://github.com/stanz-stanz/heimdall --skill network-security-stanz-stanz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the safe configuration, execution, and validation of vulnerability scans against authorised client targets, reducing manual setup and ensuring legal compliance while producing machine-readable outputs for downstream processing.

Core Features & Use Cases

  • Scan orchestration: Selects and configures tool chains (httpx, webanalyze, subfinder, dnsx, Nuclei, Nmap) based on target profiles.
  • Consent enforcement: Performs a mandatory legal compliance gate that verifies authorisation files and scan scope before any Layer 2 activity.
  • Structured outputs: Emits standardized raw-output.json files with findings, metadata, and tool provenance for automated ingestion by the Finding Interpreter.
  • Use Case: Run passive reconnaissance on a prospect domain, enrich subdomains via CT logs, and produce a validated JSON report for triage.

Quick Start

Run a Layer 1 passive reconnaissance scan for restaurant-nordlys.dk and produce the structured raw JSON output for review.

Frequently Asked Questions about network-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate authorised vulnerability scanning and ensure legal consent checks?▼

Authorised vulnerability scanning can be automated by enforcing a mandatory legal compliance gate that verifies authorisation files and scan scope before executing any active probing or Layer 2 reconnaissance activities.

How do I configure nmap and nuclei for automated network vulnerability scans?▼

Configuring nmap and nuclei for network vulnerability scans involves selecting and configuring tool chains based on target profiles, then executing Layer 2 active probing to identify vulnerabilities and output structured JSON findings.

What is Layer 1 passive reconnaissance and when do I need it for prospecting?▼

Layer 1 passive reconnaissance involves gathering target data without direct probing, such as enriching subdomains via CT logs, and is needed for prospecting domains safely before initiating active vulnerability scans.

Can I use subfinder and httpx together for subdomain enumeration and probing?▼

Yes, subfinder and httpx can be used together within a scan orchestration tool chain to discover subdomains via CT logs and then probe them for live HTTP responses during vulnerability assessments.

Does this vulnerability scanning approach output structured JSON for automated triage?▼

Yes, this vulnerability scanning approach emits standardized raw-output JSON files containing findings, scan metadata, and tool provenance specifically designed for automated ingestion and downstream triage processing.

What are the limitations of running active probing without verifying scan scope?▼

Running active probing without verifying scan scope bypasses mandatory legal compliance gates, risking unauthorised scans and invalidating structured outputs needed for safe client target assessments.

Related Skills

Explore More Software Engineering Skills→
CAPHTECHCAPHTECH
1

uncertainty-to-law

Convert validated hypotheses into enforceable laws with structured Law Card drafts.

Official
Advanced
synaptiaisynaptiai
4

receive

Parse API, webhook, file, and sensor data into validated structured payloads.

Official
Intermediate
grivera82grivera82

web2-recon

Automate web2 reconnaissance from subdomain enumeration to asset mapping.

Community
Advanced
issdandavisissdandavis
6

security-scanner

Scan web apps, APIs, and infrastructure for vulnerabilities and misconfigurations.

Community
Advanced