nmap-network-scan

Identify live hosts and open ports on a subnet using nmap.

Updated Feb 28, 2026
One-click install
npx skills add https://github.com/dgethings/netclaw --skill nmap-network-scan-dgethings
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nmap-network-scan
Source: https://github.com/dgethings/netclaw/tree/main/workspace/skills/nmap-network-scan
Command: npx skills add https://github.com/dgethings/netclaw --skill nmap-network-scan-dgethings

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly identify live hosts and open ports on a subnet using nmap, enabling faster diagnostics and secure validation of network boundaries.

Core Features & Use Cases

  • Host discovery using ICMP/ARP to determine live devices
  • Port scanning (TCP/UDP) with scoped targets and audit logging
  • CIDR-allowlist enforcement to prevent scans outside permitted ranges
  • Structured output suitable for inventory, security validation, and change verification

Quick Start

Run a subnet discovery and port scan against a permitted range to identify live hosts and open services.

Frequently Asked Questions about nmap-network-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a subnet for live hosts and open ports using nmap?

Network scanning with nmap identifies live hosts using ICMP or ARP discovery and detects open TCP or UDP ports on a subnet, producing structured results suitable for inventory and security validation.

Can I restrict network discovery scans to specific CIDR ranges?

Yes, network discovery scans enforce CIDR allowlists to prevent port scanning and host discovery operations outside permitted ranges, ensuring secure validation of network boundaries during subnet investigations.

What is the best way to audit network boundaries before or after infrastructure changes?

Pre-change or post-change auditing uses nmap network scanning to identify live hosts and open ports, verifying firewall configurations and validating network boundaries within allowed CIDR ranges.

Does this nmap network scanning approach output structured data for inventory tracking?

Yes, nmap network scanning produces structured output suitable for inventory tracking, security validation, and change verification, applying audit logging to TCP and UDP port scanning results.

Why should I use CIDR allowlists for subnet investigations and firewall verification?

CIDR allowlists prevent network scanning operations from targeting unauthorized subnets, ensuring firewall verification and host discovery remain scoped to permitted ranges and produce auditable structured results.

When do I need TCP and UDP port scanning for security validation?

TCP and UDP port scanning is needed for security validation when verifying firewall rules, auditing network boundaries, or identifying open services on live hosts within permitted CIDR ranges.