360 Secure SkillHub
360 安全技能中心

Local UIs

通过 lsof 读取本机 TCP 监听端口,并行发起短时 HTTP 探测,记录状态码、页面标题、进程名和 PID,生成 HTML 启动面板,支持 JSON 输出;结果为快照且不验证应用健康。

antreasantoniou
antreasantoniou
热度 14.83
最近更新 2026-09-06 00:17:37
分类:开发依赖:代码执行 / 读写文件 / 联网浏览搜索应用场景:DevOps / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add local-uis
Metadata
name
local-uis
description
Discover locally running HTTP interfaces, identify their listening ports and processes, and build a browsable launcher dashboard. Use when the user asks what web apps, dashboards, notebooks, or development servers are running locally or wants a single page from which to open them.

Local UIs

Discover what is serving now instead of relying on a hard-coded port list.

Run

python3 scan_uis.py

Use --no-open to create the launcher without opening it, or --json for machine-readable results.

The scanner:

  1. reads TCP listeners with lsof;
  2. limits probes to services reachable through 127.0.0.1;
  3. performs short HTTP probes in parallel;
  4. records response status, page title, process name, and PID;
  5. writes ~/.local/state/local-uis/dashboard.html.

Interpret results

  • 2xx and 3xx responses are available.
  • 401 and 403 responses show a live service that requires authentication.
  • Other 4xx and 5xx responses are reachable but unhealthy or not serving a root page.
  • The dashboard is a snapshot. Re-run the scan before making a current-state claim.

Safety

  • The tool does not probe other hosts or non-loopback addresses.
  • A service bound to all interfaces may still be externally reachable; this scanner does not establish network isolation.
  • Page titles and process metadata can be sensitive. Do not publish the generated dashboard without review.
  • Do not treat an HTTP response as proof that the application behind it is healthy.

On macOS the dashboard opens with open; on Linux it uses xdg-open when available.