Skip to content
TrustedSkillsbeta
Back to all skills

Shodan Reconnaissance And Pentesting

Listed
sickn33·vlatest·security·MIT

This skill uses Shodan to identify vulnerable online services, enabling rapid reconnaissance and simulated penetration testing for security assessments.

Repository

Install on your platform

This skill no longer installs under the name shodan-reconnaissance-and-pentesting. sickn33/agentic-awesome-skills has no skill named "shodan-reconnaissance-and-pentesting" any more. It was renamed, moved or deleted upstream.

We check each listing against its upstream repository with the rules the skills CLI uses, last on 2026-11-02. We don't show a command we know will fail.

Repository install instructions

What we know about this skill

Publisher

sickn33

Taken from the source listing. We haven't verified who controls this account.

Install target

Live repository

Not pinned. Installing fetches whatever the repository holds at the time you run the command.

Nobody has reviewed this code. TrustedSkills indexes and links skills; it does not audit, run or scan them. A skill runs with whatever access you give your agent — read the source before you install it.

Automated safety checks

scanned

We could not read this skill's source, so none of the checks below were run.

Not scanned. none of the 7727 skills in the repository match this slug — it was most likely renamed or removed upstream after the registry indexed it Source recorded as sickn33/antigravity-awesome-skills.
This is a static scan, not a review. It reads the skill's files; it does not run them, and it cannot tell you whether the skill is any good or whether the code does what its description says. A skill runs with whatever access you give your agent.
What each check looks for →

About this skill

What it does

This skill enables AI agents to perform automated reconnaissance and penetration testing using Shodan, a powerful search engine for Internet-connected devices. It allows agents to query the Shodan API to discover exposed services, retrieve banner information, and identify potential vulnerabilities across global networks without manual intervention.

When to use it

  • Initial Asset Discovery: Quickly map an organization's external attack surface by identifying open ports and running services on public IP ranges.
  • Vulnerability Scanning: Automatically search for known CVEs or misconfigurations associated with specific software versions found on target infrastructure.
  • Threat Intelligence Gathering: Monitor Shodan alerts to detect new exposures, such as unpatched cameras or web servers, in real-time.
  • Compliance Auditing: Verify that security controls are effective by checking for unintended service exposure against internal network boundaries.

Key capabilities

  • Query the Shodan API to search for specific IP addresses, domains, or port numbers.
  • Retrieve detailed banner data including OS versions, software types, and protocol details.
  • Filter results based on geographic location, operating system, or specific product strings.
  • Automate repetitive scanning tasks that typically require manual CLI interaction with Shodan tools.

Example prompts

  • "Use the Shodan API to find all web servers running Apache 2.4.49 in the US that are currently exposed to the internet."
  • "Scan the IP range 192.0.2.0/24 for any devices with Telnet enabled and report their banner details."
  • "Identify IoT cameras using ONVIF protocol located in Europe that have default credentials configured."

Tips & gotchas

Ensure you have a valid Shodan API key with appropriate quota limits before running large-scale scans, as excessive requests can trigger rate limiting. Always verify local laws and organizational policies regarding automated scanning to avoid legal complications when testing networks outside your direct control.