Security Audit Pro

为 OpenClaw 部署提供安全审计：用 Nmap 做端口与服务扫描、Nikto 做 Web 漏洞评估、核对 OWASP Top 10 清单，输出带严重度与修复建议的 JSON 合规报告，并给出 SSH 与防火墙加固建议。声明依赖 OpenClaw 2.0+、Nmap、Nikto 和 Python 3.10+；被引用的 scripts/security-audit.sh 在文件中缺失。

larios613-hub

热度 24.68

最近更新 2026-05-23 12:56:42

分类：安全依赖：代码执行 / 读写文件应用场景：DevOps / 自动化脚本 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add security-audit-owasp

Metadata

name: security-audit-owasp
version: 1.0.0
description: Full OWASP, Nmap, Nikto vulnerability assessment for OpenClaw deployments. Scan your infrastructure, harden configs, and generate compliance reports.
license: MIT
tags: ["security","owasp","nmap","nikto","vulnerability","audit","pentest","hardening","compliance","infrastructure"]
source: el-rudo-larios/security-audit
trigger: security audit vulnerability scan penetration test OWASP hardening
metadata: {"openclaw":{"emoji":"🔒"}}

Security Audit — OWASP, Nmap, Nikto

Comprehensive security auditing toolkit for OpenClaw deployments. Scan your infrastructure, identify vulnerabilities, and harden configs.

What It Does

Port Scanning — Nmap service detection, OS fingerprinting, script scanning
Web Vulnerability Assessment — Nikto web server scans, OWASP Top 10 checks
Infrastructure Hardening — SSH config audit, firewall rules, exposed services
Compliance Reports — Structured JSON output, severity ratings, remediation steps

Quick Start

# Full security audit
bash scripts/security-audit.sh --target 192.168.1.0/24 --output reports/

# Quick port scan
bash scripts/quick-audit.sh --target localhost

Features

Automated Nmap scans with service version detection
Nikto web vulnerability assessment
OWASP Top 10 checklist verification
SSH hardening recommendations
Firewall rule audit
Structured JSON reports with severity ratings
Remediation scripts for common findings

Requirements

OpenClaw 2.0+
Nmap (apt install nmap)
Nikto (apt install nikto)
Python 3.10+

License

MIT