360 Secure SkillHub
360 安全技能中心

OpenClaw Shield Quick Scan

核心功能:对指定文件夹或仓库执行快速安全扫描,检测凭证窃取、数据泄露、可疑命令执行、危险网络行为等风险,生成可操作分诊摘要。典型场景:需快速安全排查或生成安全分诊报告时。输入需指定目标路径,可选扫描器路径、输出路径;输出含风险严重程度统计、Top5高风险项(含路径行号)及下一步建议,无风险则明确告知;扫描器缺失可引导安装。

spbavarva
spbavarva
热度 27.34
最近更新 2026-05-17 11:59:40
分类:安全依赖:代码执行应用场景:报告撰写 / 摘要总结

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add openclaw-shield-quickscan
Metadata
name
openclaw-shield-quickscan
description
Run a fast OpenClaw Shield scan and summarize actionable findings. Use when users ask to scan a folder or repository for credential theft, data exfiltration patterns, suspicious command execution, risky network behavior, or a quick security triage report.

OpenClaw Shield Quick Scan

Use this skill to run a fast scan and produce a short triage summary.

Inputs

  • target_path (required): folder or file to scan.
  • scanner_path (optional): defaults to projects/OpenClaw-Shield/src/scanner.py.
  • output_path (optional): defaults to /tmp/openclaw-shield-report.json.

Workflow

  1. Verify target_path exists.
  2. Verify scanner_path exists. If missing, ask user to install OpenClaw Shield.
  3. Run the scanner.
  4. Summarize the report with scripts/summarize_report.py.
  5. Return severity counts, top findings, and next actions.

Commands

python3 "projects/OpenClaw-Shield/src/scanner.py" "<target_path>" --output "/tmp/openclaw-shield-report.json"
python3 scripts/summarize_report.py "/tmp/openclaw-shield-report.json"

If the scanner is not installed:

clawhub install openclaw-shield

Response Contract

  • Always include total findings and severity breakdown.
  • If there are findings, include up to 5 highest-severity items with file path and line.
  • If no findings exist, clearly state scan completed with no detected issues.
  • Keep output concise and actionable.