An automated vulnerability verification probe designed to replay raw HTTP requests and analyze server responses for exploit signatures.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install openclaw-poc-validator
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install openclaw-poc-validator using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is PoC Validator?
PoC Validator is a specialized utility within the Openclaw Skills ecosystem designed for security researchers and developers who need to verify potential vulnerabilities through payload replaying. By dynamically executing HTTP requests and performing deep analysis on status codes and error traces, it provides a safe, controlled environment for confirming security flaws like SQL Injection or logic errors.
The skill bridges the gap between manual testing and automated reporting by parsing raw request data and scanning response bodies for specific signature keywords. Whether you are debugging a 500 Internal Server Error or validating a complex SQLSTATE exception, PoC Validator ensures that every test is documented with high-fidelity evidence.
PoC Validator Use Cases
- Verifying Proof of Concept (PoC) payloads provided during security audits.
- Replaying raw HTTP requests to debug specific server-side exceptions or 500 errors.
- Analyzing target interfaces for SQL Injection signatures such as ExtractValue or XPATH errors.
- Automated extraction of stack traces from malicious payload responses.
How PoC Validator Works
- Data Parsing: The agent extracts the target URL, HTTP method, headers (including Cookies and User-Agent), and the specific test payload.
- Execution: The parsed data is passed to a backend execution script (
scripts/replay.py) which performs the network request. - Response Capture: The skill captures the JSON output from the execution, containing the status code, headers, and a snippet of the response body.
- Deep Analysis: It scans the response context for critical vulnerability indicators like 'SQLSTATE', 'Syntax error', or 'Call to undefined function'.
- Reporting: An automated PoC Validation Report is generated, categorizing the evidence and providing a definitive conclusion on the vulnerability status.
PoC Validator Setup
To integrate this skill into your local environment, ensure you have Python 3 installed and the Openclaw Skills framework configured.
# Navigate to your skill directory
cd skills/poc-validator
# Ensure the replay script has execution permissions
chmod +x scripts/replay.py
# Install any required dependencies
pip install requests
PoC Validator Data Schema & Taxonomy
The skill organizes validation data into structured reports and utilizes the following metadata taxonomy:
| Field | Description |
|---|---|
Target Interface |
The HTTP Method and URL tested. |
Test Payload |
The specific injection code or payload utilized in the probe. |
Response Status |
The HTTP status code returned by the server. |
Analysis Conclusion |
A summary of whether the vulnerability was confirmed or mitigated. |
Critical Evidence |
Extracted stack traces or error logs demonstrating the flaw. |
PoC Validator Advanced Features
- Smart Body Snippets: Automatically identifies and extracts only the most relevant portions of a server response to highlight vulnerabilities.
- Signature Detection: Includes a pre-defined library of error keywords like
SQLSTATE,XPATH syntax error, andExtractValuefor instant identification. - Custom Header Injection: Supports complex session handling by injecting specific
CookieandUser-Agentstrings into the replay workflow. - Automated Evidence Logging: Formats critical stack traces into clean Markdown blocks for immediate inclusion in security documentation within Openclaw Skills.
SKILL.md
Loading
Related Openclaw Skills
Quant Strategy Bundle
A comprehensive suite of verified quantitative trading strategy frameworks designed for stock market analysis, backtesting, and signal generation.
Agent Browser
A high-performance Rust-based headless browser CLI designed to give AI agents full control over web navigation and page interaction.
Asimov's Laws
An ethical reference framework based on Asimov's Laws of Robotics to provide philosophical guidance for AI agent behavior.
ETermin Integration for AI Agents
A comprehensive Openclaw Skills integration for managing ETermin appointments, availability, and customer data via AI agents.
Sidetracker AI Agent Skill
A powerful integration for Sidetracker that enables AI agents to automate time tracking, task management, and project monitoring.
Kimi Use
A comprehensive Node.js toolkit for Kimi AI providing seamless chat, vision, and translation capabilities.
Featured*
