A comprehensive security auditing tool that scans websites for third-party script risks, tracking methods, and compliance gaps.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install cside-site-scanner
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install cside-site-scanner using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is cside Site Scanner?
The cside Site Scanner is a specialized tool designed for Openclaw Skills to provide a deep technical audit of any website's client-side security posture. It specializes in identifying the "shadow code" often introduced by third-party vendors and tag managers that can lead to data breaches or compliance failures.
By performing a point-in-time static scan, it evaluates critical security components including Subresource Integrity (SRI), Content Security Policy (CSP) headers, and the presence of invasive fingerprinting techniques. This skill is essential for developers and security researchers who need to quantify the risk profile of a web domain quickly and accurately.
cside Site Scanner Use Cases
- Auditing third-party scripts to identify unaudited code injected via tag managers.
- Checking for PCI DSS 4.0 compliance risks by identifying scripts with access to payment forms.
- Detecting invasive privacy tracking and browser fingerprinting methods like Canvas or WebGL harvesting.
- Evaluating the strength of security headers such as CSP, HSTS, and Permissions-Policy.
- Performing competitive analysis or security due diligence on external web properties.
How cside Site Scanner Works
- The agent navigates to the target URL using a headless browser and waits for the network to reach an idle state to ensure all dynamic elements are loaded.
- It extracts a complete inventory of all first-party and third-party resources, including scripts, links, and iframes.
- The scanner performs tag manager chain detection to identify scripts that bypass standard code reviews by being injected at runtime.
- It analyzes security headers and cookie flags to identify potential vulnerabilities or mixed content issues.
- The system checks for payment-related DOM elements to assess PCI DSS relevance and identifies fingerprinting patterns.
- A weighted security grade (A-F) is calculated based on factors like SRI coverage, CSP presence, and script counts.
- A detailed markdown report is generated, summarizing risks, third-party domains, and compliance status.
cside Site Scanner Setup
To integrate this capability into your environment, ensure you have the Openclaw Skills framework configured with browser access.
# Trigger a scan via the CLI
openclaw run cside-site-scanner --url https://example.com
# Ensure browser-use dependencies are installed
pip install browser-use
Note: Do not exceed a scanning frequency of one domain per minute to avoid rate limiting or blocking.
cside Site Scanner Data Schema & Taxonomy
The scan produces a structured report containing the following data points:
| Data Point | Description |
|---|---|
| Security Grade | A percentage-based score (A-F) across 8 weighted security factors. |
| Script Inventory | Categorization of scripts by domain, loading method (async/defer), and SRI presence. |
| Header Analysis | Status of CSP, HSTS, X-Frame-Options, and Permissions-Policy. |
| Privacy Audit | Detection of known tracker domains and 5+ fingerprinting methods. |
| PCI Indicators | Flagging of sensitive input fields (cc-number, cvv) and scripts with DOM access. |
cside Site Scanner Advanced Features
- Tag Manager Chain Analysis: Specifically identifies scripts injected by GTM or Tealium that are often invisible to standard scanners.
- Fingerprinting Heuristics: Uses rapid-succession navigator harvesting and AudioContext analysis to detect advanced tracking.
- PCI DSS 4.0 Mapping: Maps third-party script access directly to requirement 6.4.3 for payment security compliance.
- Automated Security Grading: Provides a weighted scoring system to help teams prioritize remediation efforts across multiple domains.
SKILL.md
Loading
Related Openclaw Skills
Cloudflare Crawl (cf-crawl)
An advanced asynchronous web crawler utilizing Cloudflare Browser Rendering for high-speed data extraction and AI-powered structured processing.
Shuidibao Assistant
An intelligent insurance consultant for querying, comparing, and receiving purchase advice for Shuidibao insurance products.
Gold Price Tracker
A specialized skill for retrieving real-time market prices for gold, silver, and other precious metals across banks and retail brands.
TimeBlock
TimeBlock is a local-first CLI utility for logging, tracking, and analyzing intentional time-blocking operations through simple bash commands.
Popup Generator
A professional framework for designing, triggering, and auditing high-conversion popups and modals without sacrificing user experience or SEO.
Cold Chain Risk Calculator
A specialized tool for calculating temperature excursion risks and packaging optimization for sensitive cold chain transport routes.
Featured*
