Tech Security Audit

Performs local network scans using Nmap to detect vulnerabilities, identify service versions, and fingerprint operating systems.

What to check before installing: - Confirm you have explicit authorization to scan any network targets you will test — unauthorized scanning can be illegal or disruptive. - Ensure Nmap is installed and in PATH; the skill's docs require it but the registry metadata does not declare it as a required binary. Expect to install Nmap yourself. - If you will pass user-provided targets to this skill (especially in multi-user or automated contexts), validate or restrict those inputs to avoid accidental scans of third-party addresses or private ranges you don't control. - Running the skill will execute the local nmap binary via subprocess.run. That is expected for this functionality, but be mindful: the agent could perform noisy scans if invoked autonomously. Consider limiting autonomous invocation or adding governance controls before allowing the agent to run this skill without explicit user confirmation. - If you need stronger guarantees, review/modify the code to enforce allowed target ranges, rate limits, logging/auditing, and to surface scan parameters to the user rather than using defaults.

Type: OpenClaw Skill Name: tech-security-audit Version: 1.0.0 The skill is classified as suspicious due to its core functionality in `nmap_scanner.py` which executes `nmap` via `subprocess.run`. While the use of `nmap` is aligned with the stated 'Tech Security Audit' purpose, it grants broad network access and reconnaissance capabilities. The `target` parameter is user-controlled, posing a significant risk of misuse if an AI agent is prompted to scan unauthorized internal networks or sensitive targets, even though the code itself does not exhibit direct shell injection vulnerabilities or explicit malicious intent like data exfiltration or persistence.