← All skills
Shodan Reconnaissance and Pentesting
77 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By Dicklesworthstone/pi_agent_rust (GitHub) · coding · 1,992 stars · scanned at commit 07fc1e0
This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using Shodan," "scan IP ranges with Shodan," or "discover IoT devices and open ports." It provides comprehensive guidance for using Shodan's search engine, CLI, and API for penetration testing reconnaissance.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 1 place.
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 20 places.
Show 17 more
- tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 76
shodan host 1.1.1.1 - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 93
shodan honeyscore 192.168.1.100 - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 104
shodan search apache - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 113
shodan search product:mongodb - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 122
shodan count openssh - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 132
shodan download results.json.gz "apache country:US" - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 144
shodan parse --fields ip_str,port,hostnames results.json.gz - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 209
shodan scan submit 192.168.1.100 - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 221
shodan scan list - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 233
shodan scan protocols - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 241
shodan stats nginx - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 266
curl -s "https://api.shodan.io/api-info?key=YOUR_KEY" | jq - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 383
shodan search 'org:"Target Company"' - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 398
shodan search 'vuln:CVE-2019-0708 country:US' - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 410
shodan search 'webcam has_screenshot:true country:US' - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 425
shodan search 'ssl.cert.subject.cn:*.example.com' - tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance/SKILL.md, line 482
shodan search 'net:192.168.1.0/24'
Sends data to these websites: api.shodan.io
This is disclosed by the author in the skill's SKILL.md or README.
Found in 3 places.
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'shodan-reconnaissance-and-pentesting' ] || [ -L ~/.agents/skills/'shodan-reconnaissance-and-pentesting' ]; then echo 'A skill folder named shodan-reconnaissance-and-pentesting already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/Dicklesworthstone/pi_agent_rust' "$d" && git -C "$d" checkout --quiet '07fc1e0b82ab6a16e694a0e00a36767e9f23cf1b' -- 'tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance' && mkdir -p ~/.agents/skills && cp -R "$d"/'tests/ext_conformance/artifacts/templates-davila7/cli-tool/components/skills/security/shodan-reconnaissance' ~/.agents/skills/'shodan-reconnaissance-and-pentesting' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'shodan-reconnaissance-and-pentesting' ~/.claude/skills/'shodan-reconnaissance-and-pentesting' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for Dicklesworthstone/pi_agent_rust shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/Dicklesworthstone/pi_agent_rust/)
Score history
| Date | Version | Score |
|---|
| 2026-11-14 | 07fc1e0 | 77 |
| 2026-11-10 | 9804223 | 77 |
| 2026-11-08 | b41008f | 77 |
| 2026-11-06 | b57cea1 | 77 |