An all-in-one automated security scanner for port services, CVE vulnerabilities, and system hardening audits.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install auto-security-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install auto-security-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Auto Security Audit?
The Auto Security Audit is a comprehensive security tool designed for Openclaw Skills to automate the discovery of vulnerabilities and system weaknesses. It integrates industry-standard tools like nmap for port discovery, nuclei for deep CVE scanning with over 12,000 templates, and sslscan for certificate validation.
This skill goes beyond network scanning by performing local system audits on SSH configurations, firewall rules, and brute-force protection status. It is designed for developers and sysadmins who need a reliable, one-click solution to maintain a strong security posture across their internal and external environments.
Auto Security Audit Use Cases
- Automated weekly security health checks for production servers.
- Identifying open ports and unauthorized services during infrastructure deployment.
- Scanning web applications for known CVEs, XSS, and SQL injection vulnerabilities.
- Auditing SSH and firewall configurations to ensure compliance with security best practices.
- Monitoring system login attempts and brute-force attack prevention status.
How Auto Security Audit Works
- The skill initiates a network reconnaissance phase using nmap to identify active ports and service versions.
- It executes nuclei to scan for over 12,000 known vulnerabilities (CVEs) across internal and external assets.
- SSL/TLS protocols and certificates are analyzed using sslscan to ensure encrypted communication safety.
- Local system configuration checks are performed on SSH, UFW/iptables, and fail2ban to identify hardening gaps.
- A comprehensive Markdown report is generated, categorizing risks into Critical, Warning, and Safe levels.
- Summaries are prepared for immediate notification via terminal or external messaging integrations.
Auto Security Audit Setup
Prerequisites
Install system dependencies and the nuclei engine:
apt install -y nmap sslscan
# Install nuclei
curl -sL https://github.com/projectdiscovery/nuclei/releases/latest/download/nuclei_$(curl -s https://api.github.com/repos/projectdiscovery/nuclei/releases/latest | grep tag_name | cut -d'"' -f4 | tr -d v)_linux_amd64.zip -o /tmp/nuclei.zip
unzip /tmp/nuclei.zip -d /tmp && mv /tmp/nuclei /usr/local/bin/
nuclei -update-templates
Execution
Run the primary scan script:
python3 scripts/security_scan.py
Auto Security Audit Data Schema & Taxonomy
The skill organizes its output in a structured reports/ directory with the following taxonomy:
| File Path | Description | Format |
|---|---|---|
reports/security-scan-{date}.md |
Comprehensive security audit results with risk levels | Markdown |
reports/latest-scan-summary.txt |
High-level summary of findings for automated notifications | Plain Text |
| Terminal Output | Live summary of Critical/Warning/Safe indicators | Console |
Auto Security Audit Advanced Features
- Cron job integration for automated weekly or daily security scanning schedules.
- Feishu (Lark) notification support for real-time risk alerts and report summaries.
- Dual-network scanning capabilities covering both internal and external assets.
- Extensible vulnerability templates through nuclei's update-templates feature.
- Multi-agent collaboration potential within the Openclaw Skills ecosystem for automated remediation.
SKILL.md
Loading
Related Openclaw Skills
SkillScout
SkillScout is a security-focused directory and verification tool used to discover and audit Openclaw Skills before installation.
Instaclaw
A dedicated social media platform where AI agents generate, share, and interact with image-based content using the Model Context Protocol.
ClawDirect
A specialized directory and protocol that allows AI agents to discover, interact with, and submit agent-oriented social web experiences.
ClawDirect-Dev
A development framework for building AI agent-friendly web applications featuring secure ATXP authentication and MCP tool integration.
Second Brain
A personal knowledge base powered by Ensue for capturing and retrieving structured understanding that compounds over time.
ClawMart Browser
A specialized tool for searching and evaluating AI personas and skills directly within the ClawMart marketplace.
Featured*
