360 Secure SkillHub
360 安全技能中心

Attack Surface Mapper

该 Skill 汇总已安装技能、通道、工具、模型、记忆与供应链等攻击面，读取本机红队结果与蓝队审计记录，按“是否被测、是否被检出”判定覆盖、部分覆盖或缺口，并用影响×可能性打分，输出覆盖矩阵与加固建议文档。

arhadnane
arhadnane
热度 39.44
最近更新 2026-05-11 17:39:59
分类：安全依赖：读写文件应用场景：报告撰写 / 工作流 / 研究

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add attack-surface-mapper
Metadata
name
attack-surface-mapper
description
Purple team — map agent's full attack surface by combining red team probes and blue team detections. Identify defense coverage gaps and prioritize hardening.
metadata
{"openclaw":{"emoji":"🗺️","category":"purple-team"}}

Attack Surface Mapper — Defense Coverage Matrix

Purpose

Provide a unified view of the agent's security posture by combining offensive test results (red team) with defensive detection capabilities (blue team). Identify gaps where attacks exist but no detection covers them.

Trigger

Run on:

  • Weekly scheduled review
  • After any security configuration change
  • After installing/removing skills
  • User request: "map attack surface", "security posture"

Attack Surface Categories

Surface Components Example Vectors
CHANNELS WhatsApp, Telegram, Discord, Slack, Signal, iMessage Prompt injection, phishing, social engineering
SKILLS All installed SKILL.md files Malicious instructions, conflicting directives, data theft
TOOLS exec, file system, browser, network Command injection, path traversal, SSRF
MODELS API endpoints (Anthropic, OpenAI, local) Prompt injection, model confusion, jailbreak
MEMORY .learnings/, .memory/, session state Memory poisoning, persistence, false context
INTER-AGENT sessions_send, shared state, cross-session Agent-to-agent attack, lateral movement
SUPPLY CHAIN ClawHub skills, npm packages, model providers Typosquatting, compromised packages, model supply chain

Core Workflow

  1. Enumerate all active surfaces (channels, skills, tools, models, memory stores)
  2. Load red team results from .security/red-team/*.jsonl
  3. Load blue team detections from .security/audits/*.md and firewall logs
  4. For each surface × vector:
    • Red tested? YES/NO
    • Blue detected? YES/NO/PARTIAL
    • Status: COVERED | PARTIAL | GAP
  5. Risk score each gap: impact(1-5) × likelihood(1-5)
  6. Generate coverage matrix and prioritized hardening plan
  7. Output to .security/surface-map-YYYY-MM-DD.md

Coverage Matrix (example output)

Surface Vector Red Tested Blue Detected Status Risk Score Priority
Channel Prompt injection YES YES COVERED — —
Channel Encoded payload YES PARTIAL PARTIAL 12 HIGH
Skill Malicious SKILL.md NO NO GAP 20 CRITICAL
Memory Poisoning YES NO GAP 16 HIGH
Supply chain Typosquatting NO NO GAP 15 HIGH

Guardrails

  • Read-only aggregation — never modifies defenses directly
  • Gap data is confidential — stored in .security/ only
  • Recommendations are advisory — require human approval to implement
  • Re-run after every hardening cycle to measure improvement