Security Scanner

**Judgment:** This skill is a reasonably robust, tool-driven security scanning helper that can streamline penetration testing and vulnerability assessment workflows when used on properly authorized targets. It mainly acts as an orchestrator and guide around well-known tools (nmap, nuclei, sslscan, testssl.sh, nikto), which gives it solid functional depth but also means its quality depends heavily on those underlying utilities and the operator’s environment. **Strengths:** - Good coverage of common offensive security tasks: quick recon, full port scans, web vulnerability scans, and SSL/TLS analysis. - Encourages standardized reporting (markdown reports with targets, open ports, vulnerabilities, and recommendations), which is useful for audits and repeatable workflows. - Clear, concrete command patterns make it easier for non-experts to run fairly comprehensive scans without crafting everything from scratch. **Key Risks & Caveats:** - **Legal and ethical risk:** Running these scans against systems you do not own or have explicit written authorization for can be illegal and may violate terms of service; the skill must only be used for authorized testing. - **Operational impact:** Aggressive scanning (full port scans, large nuclei runs) can generate significant load, trigger intrusion detection systems, or cause rate limiting and temporary instability on sensitive services. - **False positives/negatives:** Like any automated scanner, results should not be treated as definitive. Some vulnerabilities may be missed, while some reported issues may be misleading without manual validation. - **Environment dependencies:** Effectiveness and reliability depend on correct installation, configuration, and updating of nmap, nuclei, sslscan, testssl.sh, nikto, and relevant templates. **Recommended Scenarios:** - Internal security teams performing routine vulnerability scanning and recon on corporate networks and web apps they manage. - DevSecOps pipelines where scheduled or on-demand scans of staging/production environments are needed before releases. - Periodic SSL/TLS posture reviews for public-facing services to catch weak protocols, ciphers, and certificate issues. - Generating structured evidence for security reviews, compliance checks, or penetration test reports, where consistent markdown outputs are valuable. Use this skill when you need a repeatable, command-driven security scanning workflow on systems you are explicitly allowed to test, and pair it with manual analysis and remediation planning for best results.