A comprehensive security assessment tool for industrial control systems (OT/ICS) based on 30 expert controls across 6 core security principles.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install ot-security-assessment
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install ot-security-assessment using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is OT Security Assessment?
The OT Security Assessment skill provides a standardized framework for evaluating the security maturity of industrial environments. It assesses posture across six critical dimensions: Business Driven, Risk Based, Enterprise Wide, Methodical, OT Security Focused, and OT Security Compliant. This tool is designed for security professionals managing SCADA, PLC, DCS, or HMI systems who need actionable insights into their critical infrastructure protection. Leveraging these Openclaw Skills allows teams to bridge the gap between IT and OT security governance with certified expert-level scoring algorithms developed by CISSP and CISM professionals.
OT Security Assessment Use Cases
- Evaluating security posture for SCADA, PLC, or DCS environments.
- Hardening OT network security and implementing the Purdue Model for segmentation.
- Assessing compliance with IEC 62443, NIST CSF for OT, or NERC CIP regulations.
- Identifying critical security gaps in industrial control systems during IT/OT convergence.
- Tracking OT security maturity improvements over time through quarterly automated assessments.
How OT Security Assessment Works
- The agent initiates a diagnostic interview to gather compliance status across 30 specific security controls.
- Users provide boolean responses (compliant or non-compliant) for each control within the 6 defined security principles.
- The skill constructs a structured data payload and securely transmits it to the ToolWeb API via curl.
- The proprietary scoring algorithm calculates overall compliance, risk levels, and principle-specific performance percentages.
- Results are presented in a high-impact report with prioritized remediation findings and critical gap analysis.
OT Security Assessment Setup
To enable this skill, you must configure your API credentials and ensure the system environment is ready:
# 1. Obtain your API key from the ToolWeb portal: https://portal.toolweb.in
# 2. Export the key to your environment variables
export TOOLWEB_API_KEY="your_api_key_here"
# 3. Ensure curl is installed and available in your system path
OT Security Assessment Data Schema & Taxonomy
The assessment utilizes a structured JSON schema categorized by 6 security principles. Each principle contains an array of control objects mapped to unique IDs.
| Principle Key | Control Range | Core Focus Area |
|---|---|---|
business_driven |
bd.1 — bd.5 | Strategy, Budget, and Leadership Reporting |
risk_based |
rb.1 — rb.5 | Methodology, Risk Register, and Tolerance |
enterprise_wide |
ew.1 — ew.5 | Unified IT/OT Governance and Asset Inventory |
methodical |
m.1 — m.5 | Procedures, Training, and Incident Management |
ot_security_focused |
of.1 — of.5 | Network Segmentation and Industrial DMZ |
ot_security_compliant |
oc.1 — oc.5 | Regulatory Adherence (IEC 62443, NIST) |
OT Security Assessment Advanced Features
- Detailed risk level classification (High, Medium, or Low) based on industry-standard proprietary algorithms.
- Multi-principle scoring support allowing for partial assessments when specific data is unavailable.
- Prioritized remediation roadmap with severity-based findings to assist in budget justification.
- Seamless integration with the broader ecosystem of Openclaw Skills for comprehensive security posture management.
- Expert-level scoring that accounts for the specific challenges of brownfield industrial plants.
SKILL.md
Loading
Related Openclaw Skills
add.tools
A specialized search engine designed for AI agents to discover, evaluate, and integrate free and paid tools, APIs, and MCP servers.
STS2 Vision Monitor
A sophisticated visual monitoring system for Slay the Spire 2 that utilizes screen capture and OCR to provide real-time combat data and DPS statistics.
BugPack - View Bug Details
A specialized skill for fetching deep contextual data for specific software defects including visual evidence and environment metadata.
RMB Upper Skill
A specialized financial utility that converts numeric currency values into formal Chinese uppercase characters (RMB) following standard accounting practices.
Xiaohongshu Content Generator (xhs-content-gen)
An automated AI generator designed to create high-conversion titles, structured posts, and optimized hashtags for the Xiaohongshu platform.
Carousel Layout Component
A specialized technical skill for designing, auditing, and optimizing high-performance, accessible carousel and slider layouts for sequential content display.
Featured*
