nmap

Identify live hosts and open ports within an authorized network scope.

612|102|Updated Apr 27, 2026
One-click install
npx skills add https://github.com/yv1ing/Z3r0 --skill nmap-yv1ing
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nmap
Source: https://github.com/yv1ing/Z3r0/tree/main/sandbox/.agents/skills/nmap
Command: npx skills add https://github.com/yv1ing/Z3r0 --skill nmap-yv1ing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams perform authorized network discovery and service/version checks without manual, ad-hoc commands, reducing uncertainty and risk during assessments.

Core Features & Use Cases

  • Host discovery: identify live hosts on a defined scope.
  • Port and service/version detection: enumerate open ports and identify services and versions.
  • NSE script checks and network inventory: run scripts for deeper analysis and maintain a network inventory.
  • Local diagnostics: provide quick network health checks for bounded environments.

Quick Start

Scan a defined, authorized target range using nmap to generate a report of open ports and detected services.

Frequently Asked Questions about nmap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform authorized network discovery and port detection on a defined scope?

To perform authorized network discovery, you scan a defined target range to identify live hosts and open ports. This process relies on host discovery and port detection to generate a structured report of active network assets.

What is the best way to enumerate service versions during a vulnerability assessment?

Enumerating service versions requires running port detection alongside version detection protocols. This identifies the specific services and their versions running on open ports, providing structured output for vulnerability assessments.

Can I run NSE script checks for deeper network inventory analysis?

Yes, you can run NSE script checks to perform deeper analysis and maintain a network inventory. These scripts execute within an authorized scope to provide structured diagnostic and security testing output.

Does this network scanning approach work for bounded red-team exercises?

Yes, this network scanning approach works for bounded red-team exercises where the scope is clearly defined and approvals are in place. It safely identifies live hosts and open ports within the authorized boundaries.

What are the limitations of using nmap for local network diagnostics?

The limitation of using nmap for local network diagnostics is that it requires a clearly defined, authorized scope. It should not be used outside bounded environments to ensure secure and compliant network assessment.