A comprehensive network reconnaissance tool for port scanning, service detection, and security auditing using the Nmap engine.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install nmap-recon
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install nmap-recon using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Nmap Recon?
Nmap Recon is a robust security module designed for Openclaw Skills that automates the process of network discovery and security assessment. It enables technical users and security professionals to identify open ports, detect running services and their versions, and fingerprint operating systems with high precision. By leveraging the industry-standard Nmap utility, this skill provides a critical layer of visibility into network infrastructure.
Built to handle everything from rapid discovery scans to deep, script-based vulnerability assessments, this tool ensures that agents can map attack surfaces effectively. Integrating this into your Openclaw Skills library allows for seamless transitions between identifying infrastructure and auditing its security posture, making it an essential component for any DevSecOps workflow.
Nmap Recon Use Cases
- Identifying all active hosts and open ports within a specific CIDR range.
- Detecting service versions to identify outdated or vulnerable software components.
- Performing stealthy SYN scans to map network perimeters without triggering standard alerts.
- Auditing firewall configurations by testing which ports are accessible from external networks.
- Running specialized Nmap Scripting Engine (NSE) scripts to find known vulnerabilities.
How Nmap Recon Works
- The agent receives a target specification, such as an IP address, hostname, or network range.
- It selects a scan profile based on the desired depth, ranging from a fast top-1000 port scan to a comprehensive 65535-port inspection.
- The skill executes the Nmap command through the system shell, utilizing appropriate flags for timing, scripts, and output.
- Output is captured in multiple formats (XML, greppable, and human-readable) to ensure the data is ready for both human review and automated parsing.
- The agent analyzes the results and presents a summarized report of the network's security state.
Nmap Recon Setup
To use this skill, ensure that Nmap is installed on your host system. Most Linux distributions include it in their default repositories:
# For Debian/Ubuntu-based systems
sudo apt update && sudo apt install nmap -y
# For Red Hat/Fedora-based systems
sudo dnf install nmap
Note: Certain advanced features, such as OS detection (-O) and SYN scans (-sS), require root or sudo privileges. Ensure your environment for Openclaw Skills has the necessary permissions to execute these commands.
Nmap Recon Data Schema & Taxonomy
The Nmap Recon skill organizes its findings using standardized output formats to maintain compatibility with other security tools. By default, it uses the -oA flag to generate three distinct file types:
| File Extension | Format Name | Description |
|---|---|---|
.nmap |
Human-Readable | The standard text output designed for manual review. |
.xml |
XML Output | Structured data used for machine parsing and reporting. |
.gnmap |
Greppable | A line-based format optimized for extraction via CLI tools like grep and awk. |
Scan files are automatically timestamped (e.g., scan_YYYYMMDD_HHMMSS) to prevent overwriting and to maintain an audit trail.
Nmap Recon Advanced Features
- Nmap Scripting Engine (NSE) integration for automated vulnerability, discovery, and exploit testing.
- Support for timing templates (-T0 through -T5) to optimize for either maximum stealth or maximum speed.
- CIDR range and input file support for scanning large-scale network environments.
- Automated service and version detection to identify specific application instances.
- Aggressive scanning modes that combine OS detection, version scanning, and traceroute in one command.
SKILL.md
Loading
Related Openclaw Skills
Devtopia
A compounding tool ecosystem designed for AI agents to create, discover, and compose functional tools for each other.
Devtopia Identity
Securely manage wallet-backed on-chain agent identities and cryptographic proofs on the Base blockchain.
Task System
A complete task lifecycle management system with SQLite persistence and automated monitoring for AI agents.
Token Cost Estimator
A diagnostic tool for calculating API token consumption and financial costs based on agent session transcripts.
Ghostfolio
A specialized skill for querying Ghostfolio portfolio metrics, holdings, and dividend data via automated API interactions.
Beautiful Mermaid
A high-performance, zero-dependency engine for rendering Mermaid diagrams into themed SVGs or terminal-friendly ASCII art.
Featured*
