An automated security auditing tool for credential matching, dictionary generation, and multi-protocol vulnerability testing.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install credential-auditor
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install credential-auditor using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Credential Auditor?
Credential Auditor is a professional security automation skill designed for engineers to conduct intelligent password assessments and vulnerability detection. As part of the Openclaw Skills ecosystem, it allows users to perform deep security audits by identifying default device credentials and testing password strength across various network layers. The tool synthesizes device identification, targeted wordlist creation, and multi-protocol testing into a single, cohesive workflow.
By leveraging this skill, security teams can proactively identify weak points in their infrastructure. Whether you are checking for default router passwords or simulating complex social engineering attacks, Credential Auditor provides the technical depth and automation required for modern security standards within Openclaw Skills.
Credential Auditor Use Cases
- Automating security baseline checks for routers, cameras, and servers using default credential databases.
- Auditing enterprise password policies by generating targeted, rule-based dictionaries for compliance testing.
- Enhancing penetration testing workflows through automated multi-protocol brute-force testing and report generation.
How Credential Auditor Works
- The user specifies a target IP or device type and the desired security audit parameters.
- Credential Auditor automatically identifies the device category and matches it against a database of over 500 default credentials.
- For custom audits, the skill generates a smart password dictionary based on target information, including leet speak variations and social engineering rules.
- It executes multi-threaded concurrent testing across protocols such as SSH, RDP, FTP, and SMB.
- The system parses the results to generate a formatted security report with actionable hardening recommendations.
Credential Auditor Setup
To use this tool within Openclaw Skills, ensure Python 3.10+ is installed. Install the required Python dependencies first:
pip install paramiko requests colorama
For advanced auditing capabilities, it is recommended to install external security tools:
# macOS
brew install hydra medusa ncrack
# Ubuntu/Debian
sudo apt-get install hydra medusa ncrack
Credential Auditor Data Schema & Taxonomy
The skill manages its audit logic and assets through a structured reference system:
| Data Component | Format | Description |
|---|---|---|
| Device Passwords | JSON | Contains 500+ default credentials for brands like Cisco, Hikvision, and TP-Link. |
| Password Rules | JSON | Defines mutation patterns, leet speak rules, and social engineering templates. |
| Protocol Configs | JSON | Stores timeout settings, thread counts, and retry logic for different network protocols. |
| Wordlists | TXT | Local repositories for common usernames and general-purpose password lists. |
Credential Auditor Advanced Features
- Seamless integration with professional-grade engines like Hydra, Medusa, and Ncrack for high-speed audits.
- Rule-based dictionary mutation supporting Leet Speak, case sensitivity, and custom suffixes.
- Intelligent device fingerprinting for automatic brand-specific credential matching.
- Support for over 20+ major hardware brands and 500+ default credential combinations.
- Comprehensive audit reporting with success/failure statistics and security hardening advice.
SKILL.md
Loading
Related Openclaw Skills
Linux Command Guard Elite
A defense-in-depth Linux command safety skill for AI agents using allowlist-first policies and approval gates.
buddy-bills: Smart AI Expense Tracker
buddy-bills is an AI-powered accounting skill that uses natural language to track personal and family expenses, manage fixed costs, and generate detailed financial summaries.
Graphviz SVG Generator
A secure, WebAssembly-powered skill for converting Graphviz DOT language descriptions into SVG images within a sandboxed environment.
Country Music AI Concert Experience
A multi-layered digital concert experience designed for AI agents to analyze country music through 29 data streams, including harmonic separation and visualizer equations.
ConsolePatrol
ConsolePatrol is an AI-first diagnostic tool that automatically scans web applications for console errors and framework-specific warnings.
evrmem
A local vector database and semantic memory system specifically optimized for Chinese language processing in AI agent workflows.
Featured*
