A professional-grade security assessment tool that performs multi-dimensional risk analysis on any URL to determine its safety and credibility.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install website-security-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install website-security-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Website Security Audit?
The Website Security Audit skill is an advanced diagnostic tool designed for Openclaw Skills users who need to verify the integrity of suspicious links or unknown platforms. It systematically evaluates domains by cross-referencing SSL/TLS certificates, legal filings, and technical fingerprints to identify phishing attempts or high-risk websites.
By leveraging the built-in browser capabilities of Openclaw Skills, this tool goes beyond simple blacklists. It examines the actual content and structural behavior of a site, providing users with a structured security report that categorizes risk levels from low to extreme, ensuring safe browsing and data protection.
Website Security Audit Use Cases
- Verifying the safety of unfamiliar payment or login pages.
- Conducting deep-dive technical audits on domain SSL/TLS health.
- Checking ICP and public security filings for Chinese web services.
- Identifying phishing sites that mimic well-known institutional brands.
- Evaluating the risk level of niche platforms like CTF trainers or digital currency exchanges.
How Website Security Audit Works
- Extract the base URL from user input, stripping away tracking parameters and UTM codes for a clean baseline.
- Utilize the built-in browser to navigate the site, capturing snapshots and analyzing page elements like footers and navigation menus.
- Perform a technical domain analysis, checking for valid HTTPS certificates, certificate authority (CA) reputation, and domain age.
- Verify legal compliance by checking for ICP licenses and public security records on government databases.
- Synthesize all data points into a comprehensive Risk Assessment Report with a clear risk rating and summary.
Website Security Audit Setup
To enable the Website Security Audit within your Openclaw Skills environment, ensure your browser profile is configured:
# Initialize the security browser profile
browser action=start profile=openclaw
# Navigate to the target URL for inspection
browser action=navigate targetId=<id> targetUrl=<base_url>
Optional: For enhanced background checks, ensure the ProSearch script is accessible in your local directory to query historical security incidents.
Website Security Audit Data Schema & Taxonomy
The skill organizes its findings into a structured Markdown report. Key data points captured include:
| Data Category | Specific Metrics Collected |
|---|---|
| Basic Info | URL, Page Title, SSL Status, Redirect Path |
| Filing Info | ICP License Number, Public Security Record, Entity Name |
| Background | Host Organization, Platform Type, Credibility Source |
| Risk Analysis | Domain Age, Content Density, Phishing Similarity |
Website Security Audit Advanced Features
- Multi-agent search integration: Combines browser snapshots with automated ProSearch queries to find historical security breaches.
- Technical Fingerprinting: Detects self-signed certificates and mismatched domain signatures automatically.
- Legal Database Cross-referencing: Automates the lookup of administrative filing prefixes across various provinces.
- Dynamic Risk Weighting: Automatically elevates risk levels for sites under 6 months old that lack verifiable brand info.
SKILL.md
Loading
Related Openclaw Skills
Tencent Meeting MCP
A professional Model Context Protocol skill for automating Tencent Meeting workflows, including scheduling, transcript retrieval, and AI-powered meeting minutes.
Peter Lynch Investment Analyst
A high-performance AI agent skill modeled after Peter Lynch to provide fundamental stock analysis based on his legendary Magellan Fund investment philosophy.
Feishu Voice Sender
A specialized integration for sending audio files to Feishu as native, clickable voice messages rather than standard downloadable files.
Gaokao Zhiyuan Data API
A professional data query skill for the Chinese National College Entrance Examination (Gaokao) providing real-time access to university rankings, major groups, and admission scores.
FMTWiki
A specialized clinical knowledge base skill for managing Fecal Microbiota Transplantation data through multi-agent verification and evidence-based tracking.
Umeng+ App Data Analysis
A comprehensive integration for Openclaw Skills that enables developers to fetch and analyze mobile application performance data directly from the Umeng+ Open API.
Featured*
