Install
$ agentstack add skill-02loveslollipop-opencrow-netcat-async ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
OpenCROW I/O - Netcat Async
Runtime preflight
Probe required commands with command -v and Python modules with importlib.util.find_spec before use. Prefer a PATH-resolved OpenCROW MCP helper or the ctf/sage environment when available, then the managed helper or system Python. If a capability is missing, stop that path safely and report the exact missing command or module.
Prefer the opencrow-netcat-mcp server for session lifecycle, reads, and writes. Fall back to scripts/ncx only when you need to inspect or debug the backend directly.
MCP First
- Use
toolbox_info,toolbox_verify, andtoolbox_capabilitiesfirst. - Use the generic session tools:
session_startsession_listensession_sendsession_readsession_statussession_stop- Keep one named session per target flow so the MCP server can report stable artifacts under
/tmp/opencrow-nc-async//.
Use scripts/ncx to manage long-lived TCP sessions instead of one-shot nc invocations when you are operating outside MCP.
Workflow
- Start a named outbound session, or listen for one inbound connection.
- Send one or more payloads while the daemon keeps receiving output asynchronously.
- Read logs (
tailfor recent data,followfor streaming). - Stop the session when done.
Commands
# Start session
scripts/ncx start --name demo --host 127.0.0.1 --port 9001
# Listen on loopback for one inbound connection (port 0 selects a free port)
scripts/ncx listen --name inbound --port 0
# Send text (append newline for line-oriented protocols)
scripts/ncx send --name demo --data 'ping' --newline
# Send exact bytes using hex or strict base64
scripts/ncx send --name demo --hex '00 03 ff'
# Read latest output
scripts/ncx read --name demo --tail 40
# Follow output live
scripts/ncx read --name demo --follow
# Check metadata and process state
scripts/ncx status --name demo
# Stop session
scripts/ncx stop --name demo
Operational Rules
- Use one session per target/service flow (
--namescoped per host+port interaction). - Prefer
--newlinefor interactive text protocols. - Non-loopback listeners require
--allow-remote; restrict known peers with--expected-peer. - Read with
--tailbefore--followto avoid missing context. - Stop sessions explicitly to avoid stale daemons.
- If
statusreportsrunning: false, inspectdaemon.logand restart.
Files and State
Session state lives at /tmp/opencrow-nc-async//:
io.log: timestamped TX/RX eventsrx.raw: raw received bytesdaemon.log: daemon stdout/stderrmeta.json: session metadatapid: daemon PID
References
- For usage patterns and recovery steps, read
references/patterns.md.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: 02loveslollipop
- Source: 02loveslollipop/OpenCROW
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.