# Deep Scanner

> >-

- **Type:** Skill
- **Install:** `agentstack add skill-knoxops-open-devops-skills-deep-scanner`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [KnoxOps](https://agentstack.voostack.com/s/knoxops)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [KnoxOps](https://github.com/KnoxOps)
- **Source:** https://github.com/KnoxOps/open-devops-skills/tree/master/plugins/ico/skills/deep-scanner
- **Website:** https://knoxops.app?invite_token=GITHUB26

## Install

```sh
agentstack add skill-knoxops-open-devops-skills-deep-scanner
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

## Input Parameters

| Name | Type | Required | Description |
|------|------|----------|-------------|
| run_dir | string | Yes | Workspace root directory |
| resource_id | string | Yes | Single resource ID to scan |
| ssh_key_path | string | No | SSH key path for remote access |

## Execution Flow

### Task Context

Before starting execution, initialize `task_context.json`:

```json
{
  "task_id": "",
  "current_step": 0,
  "current_step_id": null,
  "status": "running",
  "steps": {
    "deep_scan": "pending",
    "review_deep_scan": "pending"
  },
  "updated_at": ""
}
```

Update this file after each step completes. On error, set step status to `"failed"` and overall `status` to `"failed"`.

### Step 1: deep_scan

**Type:** agent
**Description:** Execute deep scan on target machine

## Execution
Launch an independent agent with the following prompt file:

**Prompt file:** `$PLUGINS/ico/skills/deep-scanner/prompts/deep-scan.agent.md`
**Agent workflow:**

1. Prepare the execution environment

2. Execute the agent with the prompt

3. Write results to:
   - File: `analysis/deep_scan_{resource_id}.json`

## Output
- **Schema:** schemas/deep-scan.schema.json
  - **File:** analysis/deep_scan_{resource_id}.json

### Progress Tracking

After completing this step, update `task_context.json`:
- Set `current_step_id` to `"deep_scan"`
- Set `steps.deep_scan` to `"completed"`
### Step 2: review_deep_scan

**Type:** inline
**Description:** Validate deep scan output before completing (BLOCKING)

## Execution
Follow these instructions:

Read all deep_scan output files and validate them before completing:

Each deep_scan_*.json MUST have:
- technical.processes[] (non-empty)
- technical.listening_ports[] (non-empty)
- technical.traffic_graph with edges[] array (iftop data collected)
- technical.crontab_entries[] present
- technical.systemd_timers[] present
- technical.disk_partitions[] present
- technical.external_traffic[] present (ss -tn output)
- business.owner with name, team fields
- business.application non-empty

Do NOT include ssh_key_path or any credential paths in output.
Fix any issues before completing. BLOCKING.

### Progress Tracking

After completing this step, update `task_context.json`:
- Set `current_step_id` to `"review_deep_scan"`
- Set `steps.review_deep_scan` to `"completed"`

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [KnoxOps](https://github.com/KnoxOps)
- **Source:** [KnoxOps/open-devops-skills](https://github.com/KnoxOps/open-devops-skills)
- **License:** Apache-2.0
- **Homepage:** https://knoxops.app?invite_token=GITHUB26

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-knoxops-open-devops-skills-deep-scanner
- Seller: https://agentstack.voostack.com/s/knoxops
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.