Menu
Port scanner for finding open ports and services on hosts. USE WHEN user mentions port scanning, open ports, service discovery, network reconnaissance, or host enumeration. Wraps ProjectDiscovery's naabu binary as a local MCP server.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
AI image generation for blog posts, presentations, and content creation. USE WHEN user mentions generate image, create artwork, blog image, header image, presentation visual, AI art, Replicate, DALL-E, Midjourney, OR wants visual content for publications and marketing materials.
Security-first multi-agent development team with PM, developers, QA, security audit, and code review. USE WHEN user mentions dev team, development team, multi-agent development, orchestrate coding agents, parallel development, coordinate developers, build feature, implement code, carbeneai, cyberdefensetactics, purpleteamops, OR wants autonomous software development with security gates.
Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in the Defense Industrial Base (DIB). Use this skill whenever a user asks about CMMC 2.0, CMMC Level 1, Level 2, or Level 3, DoD cybersecurity compliance, NIST SP 800-171, CUI (Controlled Unclassified Information) protection, System Security Plan (SSP), Plan of Action & Milestones (POA&M), C3PAO assessments, DIBCAC audits, self-assessment, SPRS score, or any requirement under DFARS 252.204-7012 or 7021. Also trigger for: "CMMC gap analysis", "CMMC readiness", "FCI protection", "CUI scoping", "CMMC practices", "DoD contract cybersecurity", "defense supply chain security", or "prime contractor flow-down requirements".
Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities. Use this skill whenever a user asks about DORA compliance, ICT risk management frameworks, ICT incident classification or reporting, threat-led penetration testing (TLPT), ICT third-party risk management, Register of Information, contractual provisions with ICT providers, ICT concentration risk, oversight of critical ICT third-party service providers (CTPPs), or any DORA RTS/ITS obligation. Also trigger for: "DORA gap analysis", "DORA readiness", "Art. 6 ICT risk framework", "Art. 17 incident reporting", "Art. 26 TLPT", "Art. 28 third-party policy", "Art. 30 contractual provisions", "Register of Information CIR 2024/2956", "critical TPSP designation", "DORA vs NIS2", "DORA simplified framework", or EBA/ESMA/EIOPA digital resilience guidance.
Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations, Data Principal rights, Significant Data Fiduciary, Data Protection Board of India, consent under DPDPA, notice requirements, breach notification India, children's data India, cross-border data transfer India, India privacy compliance, DPDPA gap analysis, DPDPA vs GDPR, or any obligation under India's personal data protection framework. Also trigger for: "Section 6 consent", "Section 7 legitimate uses", "Section 9 children's data", "Section 10 SDF", "Section 16 cross-border", "Rule 6 breach notification", "Rule 13 SDF obligations", "Data Protection Board complaint", "verifiable parental consent India", "DPDPA compliance roadmap", or "India privacy law global company".
Expert guidance for FedRAMP certification and compliance. Use this skill whenever a user asks about FedRAMP authorization, ATO (Authority to Operate), cloud security for federal government, NIST SP 800-53 controls, CSP compliance, or any of the core FedRAMP document types: SSP, SAP, SAR, POA&M, CIS/CRM workbooks. Also trigger for questions about FedRAMP impact levels (Low, Moderate, High, LI-SaaS), FedRAMP 20x, OSCAL, 3PAO assessments, continuous monitoring (ConMon), gap assessments, system boundary definition, FedRAMP readiness, or architecture reviews for federal cloud. When in doubt, use this skill — it covers the full FedRAMP lifecycle from readiness through continuous monitoring.
| name | Naabu |
| description | Port scanner for finding open ports and services on hosts. USE WHEN user mentions port scanning, open ports, service discovery, network reconnaissance, or host enumeration. Wraps ProjectDiscovery's naabu binary as a local MCP server. |
Fast port scanner powered by ProjectDiscovery's naabu. Runs locally via MCP server wrapper around the naabu binary.
| Action | Trigger | Behavior |
|---|---|---|
| Scan Ports | "scan ports on", "check open ports", "port scan" | Run naabu against target |
| Quick Scan | "quick scan", "top ports" | Scan top 100 ports |
| Full Scan | "full port scan", "all ports" | Scan all 65535 ports |
| Passive Scan | "passive scan", "no packets" | Use Shodan InternetDB |
Example 1: Scan top ports on a host
User: "Scan the top ports on example.com"
→ naabu -host example.com -top-ports 100 -json -silent
→ Returns JSON list of open ports
Example 2: Scan specific ports on a subnet
User: "Check if SSH and HTTP are open on 192.168.1.0/24"
→ naabu -host 192.168.1.0/24 -p 22,80,443 -json -silent
→ Returns open port findings per host
Example 3: Passive recon (no packets)
User: "Do a passive port scan on example.com"
→ naabu -host example.com -passive -json -silent
→ Returns known open ports from InternetDB without sending packets
# Key flags
naabu -host <target> # Single host, IP, or CIDR
naabu -list <file> # File with targets (one per line)
naabu -p 22,80,443 # Specific ports
naabu -top-ports 100 # Top 100 or 1000 ports
naabu -json # JSON Lines output
naabu -silent # Suppress banner/info
naabu -passive # Shodan InternetDB lookup (no packets)
naabu -Pn # Skip host discovery
naabu -rate 1000 # Packets per second
naabu -o results.jsonl # Output to file
Each open port produces one JSON line:
{"ip":"93.184.216.34","port":80}
{"ip":"93.184.216.34","port":443}
The MCP server (tools/mcp-server.ts) wraps the naabu binary and exposes it as a local stdio MCP tool. Configured in ~/PAI/.mcp.json.
~/bin/naabu)brew install libpcap)