A professional query generation tool for network mapping platforms like FOFA, Shodan, and Quake to identify exposed assets and vulnerabilities.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install space-query-skill
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install space-query-skill using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Space Query Skill?
The Space Query Skill is a specialized technical module for Openclaw Skills designed to streamline network asset discovery and attack surface management. It acts as an intelligent translator that converts high-level security research goals into precise, platform-specific query syntax for FOFA, Quake, ZoomEye, and Shodan. By bridging the technical gap between different platform engines, it allows developers and security professionals to quickly locate servers, services, and IoT devices globally.
This skill is particularly powerful for vulnerability researchers who need to identify systems affected by specific CVEs. Instead of manually constructing complex logical strings, users can leverage this skill within the Openclaw Skills ecosystem to automate the discovery of official product identifiers and verified query patterns, ensuring high-accuracy results across diverse network environments.
Space Query Skill Use Cases
- Identifying exposed services such as Redis, RDP, or databases across specific geographic regions.
- Mapping the attack surface of an organization by searching for specific title tags or body keywords.
- Investigating security vulnerabilities (CVEs) using official platform product IDs for accurate impact assessment.
- Detecting expired SSL certificates or misconfigured login pages to prevent unauthorized access.
- Performing cross-platform comparisons of network assets between FOFA, Quake, and Shodan.
How Space Query Skill Works
- The skill identifies the target platform based on user intent or specific regional data requirements (e.g., Quake for China-centric data).
- It analyzes the user's search criteria to extract key attributes such as product names, port numbers, countries, and status codes.
- For vulnerability-related queries, the skill initiates a web search within the Openclaw Skills framework to find official query announcements or verified PoC repositories.
- It applies platform-specific syntax rules, such as using
="for FOFA and:for Shodan and Quake, while maintaining proper operator precedence. - The final query is presented to the user along with a technical breakdown of the logic and suggestions for narrowing down results.
Space Query Skill Setup
To integrate this skill into your environment, ensure your agent has access to the Openclaw Skills directory. No external dependencies are required beyond the standard AI coding agent configuration.
# Example: Triggering a query analysis
# The skill activates on keywords like FOFA, Shodan, or specific CVE IDs
query: "Find all Spring Framework instances in China affected by CVE-2024-38819"
Space Query Skill Data Schema & Taxonomy
The Space Query Skill organizes data based on the unique syntax requirements of each supported mapping platform:
| Platform | Operator Syntax | Primary Use Case |
|---|---|---|
| FOFA | field="value" |
Global protocol coverage and protocol-level details |
| Quake | field:value |
Threat intelligence and deep data coverage in China |
| Shodan | field:value |
IoT device mapping and vulnerability correlation |
| ZoomEye | field:value |
Service fingerprinting and component identification |
Space Query Skill Advanced Features
- Intelligent CVE Workflow: Automatically searches official blogs (FOFA, Quake) and NVD to extract the exact
apporproductIDs required for a search. - Operator Precedence Management: Ensures complex boolean logic (AND/OR/NOT) is correctly parenthesized to prevent logical errors in platform engines.
- Cross-Platform Translation: Can take a successful FOFA query and reformulate it for Shodan or Quake syntax automatically.
- Multi-Language Support: Handles both English and localized Chinese search parameters (like country names or titles) effectively within the Openclaw Skills environment.
SKILL.md
Loading
Related Openclaw Skills
Santa Method
A multi-agent adversarial verification framework that uses independent reviewers to validate AI-generated content through a convergence loop.
Lobster Dev Planner
A conversational AI project manager and lead architect that orchestrates multi-agent teams to transform ideas into enterprise-ready software.
WeChat Article Deep Analyzer
A sophisticated analysis tool that transforms unstructured WeChat Official Account articles into structured insights, including timelines, key figures, and core facts.
Prompt Refiner
A professional utility that transforms ambiguous user requests into actionable, structured prompts based on a rigorous four-element framework.
Dispatching Parallel Agents
A sophisticated workflow for delegating independent programming tasks to multiple specialized agents simultaneously to accelerate problem-solving.
Story Writer
A comprehensive end-to-end story development and writing system that manages everything from initial discovery to final HTML export.
Featured*
