proto-snmp

Audit SNMP service versions, exposure, and access controls on network devices.

Updated Jul 30, 2026

Search Tags:#audit #enumeration #hardening #pentest #network-security #snmp

Ready to run

npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-snmp

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: proto-snmp
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/proto-snmp
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-snmp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the risk of insecure SNMP configurations by providing a structured, policy-gated framework for auditing network device exposure, version posture, and access control without resorting to destructive or unauthorized probing.

Core Features & Use Cases

Version & Exposure Audit: Detects SNMPv1/v2c cleartext usage and identifies Internet-exposed SNMP services.
Access Control Review: Validates the presence of ACLs and identifies potential write-access vulnerabilities through safe, non-destructive queries.
Use Case: A security engineer needs to verify that a fleet of network switches is configured with SNMPv3 authPriv and restricted to management subnets; this skill automates the discovery and reporting of these security controls.

Quick Start

Use the proto-snmp skill to audit the SNMP configuration of the target device at 192.168.1.1 using the provided community string.

Frequently Asked Questions about proto-snmp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit SNMP configurations on network devices safely?▼

To audit SNMP configurations safely, perform authorized SNMP service discovery, version fingerprinting, and configuration posture assessment using non-destructive query methods that adhere to scope-defined OID boundaries.

What is SNMP version fingerprinting for network security?▼

SNMP version fingerprinting is the process of detecting protocol versions like SNMPv1, v2c, or v3 on network devices to identify cleartext exposure and weak authentication during a security audit.

How can I check for weak authentication and SNMPv1 cleartext exposure?▼

You can check for weak authentication and SNMPv1 cleartext exposure by conducting an access control review that validates ACLs and queries for potential write-access vulnerabilities non-destructively.

Does this SNMP network security assessment modify or disrupt target devices?▼

No, this SNMP network security assessment does not modify or disrupt target devices because it requires strict adherence to non-destructive query methods and scope-defined OID boundaries to ensure operational safety.

Can I use this to verify SNMPv3 authPriv configuration across network switches?▼

Yes, you can use this to verify SNMPv3 authPriv configuration across network switches by automating the discovery and reporting of security controls restricted to management subnets.

When do I need an authorized SNMP configuration posture assessment?▼

You need an authorized SNMP configuration posture assessment when auditing network infrastructure to identify improper access control, weak authentication, and cleartext exposure without resorting to unauthorized probing.