agentmods.dev

network-scanner-hardened

network-scanner-hardened is a skill for Claude Code from faberlens/hardened-skills. It costs 34 tokens per session (1,350 once invoked), scanned B, original, MIT.

A network discovery tool that uses nmap to find devices and collect their IP addresses, hostnames, MAC addresses, and hardware vendors. It includes checks to avoid scanning public networks by mistake.

In plain words
What is it for?
Use it to scan a home or office network, identify connected devices, perform reverse-DNS lookups, and export results as JSON.
Why use it?
It helps you understand what devices are connected to a local or authorized network without manually checking each one.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: built for openclaw.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is python3 scripts/scan.py.

Part of the security-hardened-skills plugin — 12 skills shipped together

not rated 23repo 4mo ago B scan 34 tokens original MIT

Good fit Use it to scan a home or office network, identify connected devices, perform reverse-DNS lookups, and export results as JSON.

Compare 6 skills from other repositories ↓
View source ↗ faberlens/hardened-skills faberlens.ai
Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/faberlens/hardened-skills
agentmods
npx agentmods add skills/faberlens/hardened-skills/nmap-hardened

Made for: Claude Code.

Or install security-hardened-skills, the plugin that ships this one along with the rest of its 12 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for network-scanner-hardened

README.md
[![agentmods](https://agentmods.dev/badge/skills/faberlens/hardened-skills/nmap-hardened/github.svg)](https://agentmods.dev/skills/faberlens/hardened-skills/nmap-hardened)
Your own site
<a href="https://agentmods.dev/skills/faberlens/hardened-skills/nmap-hardened"><img src="https://agentmods.dev/badge/skills/faberlens/hardened-skills/nmap-hardened/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for network-scanner-hardened

Your own site · 80×15
<a href="https://agentmods.dev/skills/faberlens/hardened-skills/nmap-hardened"><img src="https://agentmods.dev/badge/skills/faberlens/hardened-skills/nmap-hardened.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 34 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,350 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00034 $0.01350
Opus 5 $0.00017 $0.00675
Sonnet 5 $0.00007 $0.00270
Haiku 4.5 $0.00003 $0.00135

Measured 9d ago against content hash f5ad3e0ea572, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade B, and why

network-scanner-hardened scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

# Scan without sudo (may miss MAC addresses)
skills/nmap-hardened/SKILL.md · 175 lines

How it starts

The opening of the file, as written. The whole thing — 175 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Network Scanner

Discover and identify devices on local or remote networks using nmap. Gathers IP addresses, hostnames (via reverse DNS), MAC addresses, and vendor identification.

Safety First: Includes built-in protection against accidentally scanning public IP ranges or networks without proper private routing — preventing abuse reports from hosting providers.

Requirements

  • nmap - Network scanning (apt install nmap or brew install nmap)
  • dig - DNS lookups (usually pre-installed)
  • sudo access recommended for MAC address discovery

Quick Start

# Auto-detect and scan current network
python3 scripts/scan.py

# Scan a specific CIDR
python3 scripts/scan.py 192.168.1.0/24

# Scan with custom DNS server for reverse lookups
python3 scripts/scan.py 192.168.1.0/24 --dns 192.168.1.1

# Output as JSON
python3 scripts/scan.py --json

Configuration

Configure named networks in ~/.config/network-scanner/networks.json:

{
  "networks": {
    "home": {
      "cidr": "192.168.1.0/24",
      "dns": "192.168.1.1",
      "description": "Home Network"
    },
    "office": {
      "cidr": "10.0.0.0/24",
      "dns": "10.0.0.1",
      "description": "Office Network"
    }
  },
  "blocklist": [
    {
      "cidr": "10.99.0.0/24",
      "reason": "No private route from this host"
    }
  ]
}

Then scan by name:

python3 scripts/scan.py home
python3 scripts/scan.py office --json

Safety Features

The scanner includes multiple safety checks to prevent accidental abuse:

  1. Blocklist — Networks in the blocklist config array are always blocked
  2. Public IP check — Scanning public (non-RFC1918) IP ranges is blocked
  3. Route verification — For ad-hoc CIDRs, verifies the route uses private gateways

Trusted networks (configured in networks.json) skip route verification since you've explicitly approved them.

# Blocked - public IP range
$ python3 scripts/scan.py 8.8.8.0/24
❌ BLOCKED: Target 8.8.8.0/24 is a PUBLIC IP range

# Blocked - in blocklist  
$ python3 scripts/scan.py 10.99.0.0/24
❌ BLOCKED: 10.99.0.0/24 is blocklisted

# Allowed - configured trusted network
$ python3 scripts/scan.py home
✓ Scanning 192.168.1.0/24...

Read the full file on GitHub · 175 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 175 lines · 34 tokens per session scan B f5ad3e0ea572

Subscribe to this mod's changes

network-scanner-hardened is a skill published in the GitHub repository faberlens/hardened-skills (23 stars, last pushed 4mo ago), licensed MIT. It adds 34 tokens to every session and 1,350 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

AI SafetyHardware and IoTai-agentsai-behavior-analysisai-safety-researchai-securityai-skill-safety
Related

Other skills, from other repositories

risk-metrics-calculation

Calculate portfolio risk metrics including VaR, CVaR, Sharpe, Sortino, and drawdown analysis. Use when measuring portfolio risk, implementing risk limits, or building risk monitoring systems.

aisa-group/skill-inject · 45 tokens

employment-contract-templates

Create employment contracts, offer letters, and HR policy documents following legal best practices. Use when drafting employment agreements, creating HR policies, or standardizing employment documentation.

aisa-group/skill-inject · 37 tokens

llm-evaluation

Implement comprehensive evaluation strategies for LLM applications using automated metrics, human feedback, and benchmarking. Use when testing LLM performance, measuring AI application quality, or establishing evaluation frameworks.

aisa-group/skill-inject · 40 tokens

paypal-integration

Integrate PayPal payment processing with support for express checkout, subscriptions, and refund management. Use when implementing PayPal payments, processing online transactions, or building e-commerce checkout flows.

aisa-group/skill-inject · 40 tokens

calendar

Calendar and scheduling management. Use this skill when the user needs to create, view, update, or manage calendar events, appointments, meetings, or schedule-related tasks. Supports ICS file format, recurring events, and timezone handling.

aisa-group/skill-inject · 47 tokens

rag-implementation

Build Retrieval-Augmented Generation (RAG) systems for LLM applications with vector databases and semantic search. Use when implementing knowledge-grounded AI, building document Q&A systems, or integrating LLMs with external knowledge bases.

aisa-group/skill-inject · 49 tokens