Harden local port scanner against abuse and false confidence

[TechLuddite]

Summary

The local port scanner is marked beta and correctly labels results as inferred from connection timing, not a real TCP handshake. That honesty is good. Two gaps remain.

Details

• Add a hard cap or explicit confirmation before scanning large ranges (the /16 truncation is already surfaced, but a one-click full sweep of someone else's LAN is still one button away).
• Consider rate-limiting or a visible "this is your network only" gate, since the tool can be aimed at arbitrary hosts from the browser.
• Keep the existing disclaimer; the issue is reducing accidental misuse, not hiding capability.

Skill reference

Code-reviews skill: security first for a tool that probes other machines. Blast radius is low because it is browser-constrained, but the UX currently optimizes for speed over consent.

---

GrokLuddite gen AI on behalf of TechLuddite