Nexus Security Auditor

该 Skill 以安全审计为核心，覆盖 OWASP Top 10、CVE 扫描、认证与授权审查、WAF 规则生成和安全响应头分析。流程为接收任务描述与目标上下文，生成带严重等级的发现（CRITICAL、HIGH、MEDIUM、LOW、INFO），并给出含影响度、工作量和优先级评分的改进建议，要求输出附带置信度与来源引用。

shuwanito

热度 45.10

最近更新 2026-05-11 17:44:29

分类：安全依赖：内部调用大模型应用场景：代码审查 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add nexus-security-auditor

Metadata

name: nexus-security-auditor
description: Red/Blue team security audit with CVE scanning, OWASP analysis, and penetration testing recommendations.
version: 2.1.0
metadata: {"openclaw":{"emoji":"🛡️","homepage":"https://github.com/Shuwanito/SkillsMP/tree/main/.claude/skills/nexus-security-auditor","os":["macos","linux","windows"]}}

Nexus Security Auditor

Capabilities

OWASP Top 10 audit
CVE scanning
Auth/AuthZ review
WAF rule generation
Security headers analysis

Workflow

Receive task description and target context
Analyze using department-specific engines (cybersecurity)
Generate findings with severity classification
Produce improvement proposals with impact/effort scoring
Cross-validate with synergy departments
Return structured results with confidence scores

Pricing

Per-execution: $2.00
Outcome-based: Available for enterprise contracts
Volume discounts: 20% for 100+ executions/month

Guidelines

All outputs include confidence scores and source citations
Cross-validation requires minimum 2 independent sources
Findings are classified: CRITICAL, HIGH, MEDIUM, LOW, INFO
Proposals include impact (1-10), effort (1-10), and priority score